Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

turbolinux turbolinux server 8.0 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2004-1377
The (1) fixps (aka fixps.in) and (2) psmandup (aka psmandup.in) scripts in a2ps prior to 4.13 allow local users to overwrite arbitrary files via a symlink attack on temporary files.
Gnu A2ps 4.13bGnu A2ps 4.13Turbolinux Turbolinux Server 8.0Turbolinux Turbolinux Workstation 7.0Turbolinux Turbolinux HomeTurbolinux Turbolinux Server 7.0Turbolinux Turbolinux Workstation 8.0
NA
CVE-2003-0370
Konqueror Embedded and KDE 2.2.2 and previous versions does not validate the Common Name (CN) field for X.509 Certificates, which could allow remote malicious users to spoof certificates via a man-in-the-middle attack.
Apple Safari 1.0Kde Konqueror Embedded 0.1Turbolinux Turbolinux Server 8.0Turbolinux Turbolinux Workstation 8.0Redhat Linux 7.1Redhat Linux 7.2Turbolinux Turbolinux Server 7.0Turbolinux Turbolinux Workstation 7.0Kde Kde
NA
CVE-2005-0988
Race condition in gzip 1.2.4, 1.3.3, and previous versions, when decompressing a gzipped file, allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by gzip after the decompressio...
Gnu Gzip 1.2.4Gnu Gzip 1.2.4aGnu Gzip 1.3.3Freebsd Freebsd 4.1.1Freebsd Freebsd 4.11Freebsd Freebsd 4.4Freebsd Freebsd 4.5Freebsd Freebsd 4.6Freebsd Freebsd 4.7Freebsd Freebsd 4.9Freebsd Freebsd 5.1Freebsd Freebsd 5.3Redhat Enterprise Linux 2.1Redhat Enterprise Linux 4.0Redhat Enterprise Linux Desktop 3.0Turbolinux Turbolinux Appliance Server 1.0 HostingTurbolinux Turbolinux Appliance Server 1.0 WorkgroupUbuntu Ubuntu Linux 4.1Freebsd Freebsd 4.0Freebsd Freebsd 4.10Freebsd Freebsd 4.3Freebsd Freebsd 4.8
NA
CVE-2005-3624
The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows malicious users to corrupt the heap via negative or large integers in a CCITTFaxDecode stream, which lead to integer overflows and integ...
Kde Kdegraphics 3.2Kde Kdegraphics 3.4.3Sgi Propack 3.0Tetex Tetex 1.0.7Libextractor LibextractorEasy Software Products Cups 1.1.23Easy Software Products Cups 1.1.23 Rc1Kde Kword 1.4.2Poppler Poppler 0.4.2Xpdf Xpdf 3.0Conectiva Linux 10.0Easy Software Products Cups 1.1.22Easy Software Products Cups 1.1.22 Rc1Kde Koffice 1.4.2Kde Kpdf 3.2Kde Kpdf 3.4.3Tetex Tetex 2.0.2Tetex Tetex 3.0Kde Koffice 1.4Kde Koffice 1.4.1Tetex Tetex 2.0Tetex Tetex 2.0.1
NA
CVE-2005-3625
Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows malicious users to cause a denial of service (infinite loop) via streams that end prematurely, as demonstrated using the (1) CCITTFaxDecode and (2) DCTDecode streams, a...
Kde Kdegraphics 3.2Kde Kdegraphics 3.4.3Easy Software Products Cups 1.1.22Easy Software Products Cups 1.1.22 Rc1Kde Kpdf 3.2Kde Kpdf 3.4.3Tetex Tetex 2.0.2Tetex Tetex 3.0Kde Koffice 1.4Sgi Propack 3.0Tetex Tetex 1.0.7Libextractor LibextractorKde Koffice 1.4.1Kde Koffice 1.4.2Tetex Tetex 2.0Tetex Tetex 2.0.1Easy Software Products Cups 1.1.23Easy Software Products Cups 1.1.23 Rc1Kde Kword 1.4.2Poppler Poppler 0.4.2Xpdf Xpdf 3.0Conectiva Linux 10.0
NA
CVE-2005-3626
Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows malicious users to cause a denial of service (crash) via a crafted FlateDecode stream that triggers a null dereference.
Easy Software Products Cups 1.1.22 Rc1Easy Software Products Cups 1.1.23Kde Kpdf 3.2Kde Kpdf 3.4.3Tetex Tetex 3.0Xpdf Xpdf 3.0Easy Software Products Cups 1.1.23 Rc1Kde Kdegraphics 3.2Kde Kword 1.4.2Poppler Poppler 0.4.2Conectiva Linux 10.0Libextractor LibextractorKde Kdegraphics 3.4.3Kde Koffice 1.4Sgi Propack 3.0Tetex Tetex 1.0.7Easy Software Products Cups 1.1.22Kde Koffice 1.4.1Kde Koffice 1.4.2Tetex Tetex 2.0Tetex Tetex 2.0.1Tetex Tetex 2.0.2
NA
CVE-2004-1090
Midnight commander (mc) 4.5.55 and previous versions allows remote malicious users to cause a denial of service via "a corrupt section header."
Midnight Commander Midnight Commander 4.5.40Midnight Commander Midnight Commander 4.5.41Midnight Commander Midnight Commander 4.5.48Midnight Commander Midnight Commander 4.5.46Midnight Commander Midnight Commander 4.5.47Midnight Commander Midnight Commander 4.5.55Midnight Commander Midnight Commander 4.6Midnight Commander Midnight Commander 4.5.49Midnight Commander Midnight Commander 4.5.44Midnight Commander Midnight Commander 4.5.45Midnight Commander Midnight Commander 4.5.52Midnight Commander Midnight Commander 4.5.54Midnight Commander Midnight Commander 4.5.42Midnight Commander Midnight Commander 4.5.43Midnight Commander Midnight Commander 4.5.50Midnight Commander Midnight Commander 4.5.51Debian Debian Linux 3.0Redhat Enterprise Linux 2.1Suse Suse Linux 8.2Suse Suse Linux 9.0Redhat Linux Advanced Workstation 2.1Suse Suse Linux 9.1
NA
CVE-2004-1091
Midnight commander (mc) 4.5.55 and previous versions allows remote malicious users to cause a denial of service by triggering a null dereference.
Midnight Commander Midnight Commander 4.5.40Midnight Commander Midnight Commander 4.5.47Midnight Commander Midnight Commander 4.5.48Midnight Commander Midnight Commander 4.6Midnight Commander Midnight Commander 4.5.41Midnight Commander Midnight Commander 4.5.42Midnight Commander Midnight Commander 4.5.49Midnight Commander Midnight Commander 4.5.50Midnight Commander Midnight Commander 4.5.45Midnight Commander Midnight Commander 4.5.46Midnight Commander Midnight Commander 4.5.54Midnight Commander Midnight Commander 4.5.55Midnight Commander Midnight Commander 4.5.43Midnight Commander Midnight Commander 4.5.44Midnight Commander Midnight Commander 4.5.51Midnight Commander Midnight Commander 4.5.52Debian Debian Linux 3.0Redhat Enterprise Linux 2.1Suse Suse Linux 9.0Suse Suse Linux 9.1Redhat Linux Advanced Workstation 2.1Suse Suse Linux 9.2
NA
CVE-2004-1092
Midnight commander (mc) 4.5.55 and previous versions allows remote malicious users to cause a denial of service by causing mc to free unallocated memory.
Midnight Commander Midnight Commander 4.5.40Midnight Commander Midnight Commander 4.5.41Midnight Commander Midnight Commander 4.5.48Midnight Commander Midnight Commander 4.5.49Midnight Commander Midnight Commander 4.5.42Midnight Commander Midnight Commander 4.5.43Midnight Commander Midnight Commander 4.5.50Midnight Commander Midnight Commander 4.5.51Midnight Commander Midnight Commander 4.5.46Midnight Commander Midnight Commander 4.5.47Midnight Commander Midnight Commander 4.6Midnight Commander Midnight Commander 4.5.44Midnight Commander Midnight Commander 4.5.45Midnight Commander Midnight Commander 4.5.52Midnight Commander Midnight Commander 4.5.54Midnight Commander Midnight Commander 4.5.55Debian Debian Linux 3.0Redhat Enterprise Linux 2.1Redhat Linux Advanced Workstation 2.1Suse Suse Linux 9.1Suse Suse Linux 9.2Suse Suse Linux 8.0
NA
CVE-2004-1093
Midnight commander (mc) 4.5.55 and previous versions allows remote malicious users to cause a denial of service via "use of already freed memory."
Midnight Commander Midnight Commander 4.5.41Midnight Commander Midnight Commander 4.5.42Midnight Commander Midnight Commander 4.5.49Midnight Commander Midnight Commander 4.5.50Midnight Commander Midnight Commander 4.5.43Midnight Commander Midnight Commander 4.5.44Midnight Commander Midnight Commander 4.5.51Midnight Commander Midnight Commander 4.5.52Midnight Commander Midnight Commander 4.5.54Midnight Commander Midnight Commander 4.5.40Midnight Commander Midnight Commander 4.5.47Midnight Commander Midnight Commander 4.5.48Midnight Commander Midnight Commander 4.5.45Midnight Commander Midnight Commander 4.5.46Midnight Commander Midnight Commander 4.5.55Midnight Commander Midnight Commander 4.6Debian Debian Linux 3.0Redhat Linux Advanced Workstation 2.1Suse Suse Linux 8.0Suse Suse Linux 9.2Turbolinux Turbolinux Server 7.0Gentoo Linux
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook