linux vulnerabilities and exploits

(subscribe to this query)

9.3

CVSSv2

Multiple buffer overflows in the rich text processing functionality in JustSystems Ichitaro 2004 through 2007, 11 through 13, and other versions allow remote attackers to execute arbitrary code via a long (1) pard field or (2) font name in the fcharset0 field, which is not...

Justsystem Ichitaro

4.6

CVSSv2

tcl/tk package (tcltk) 8.3.1 searches for its libraries in the current working directory before other directories, which could allow local users to execute arbitrary code via a Trojan horse library that is under a user-controlled directory....

Conectiva Linux Redhat

9.3

CVSSv2

Buffer overflow in JustSystems JSFC.DLL, as used in multiple JustSystems products such as Ichitaro, allows remote attackers to execute arbitrary code via a crafted .JTD file....

Justsystem Ichitaro Ichitaro Lite2 Ichitaro Viewer

7.2

CVSSv2

abuse.console in Red Hat 2.1 uses relative pathnames to find and execute the undrv program, which allows local users to execute arbitrary commands via a path that points to a Trojan horse program....

Redhat Linux1 EDB exploit available

4.6

CVSSv2

Xsession in Red Hat Linux 6.1 and earlier can allow local users with restricted accounts to bypass execution of the .xsession file by starting kde, gnome or anotherlevel from kdm....

Redhat Linux

7.2

CVSSv2

Buffer overflow in linuxconf 1.11r11-rh2 on Red Hat Linux 5.1 allows local users to gain root privileges via a long LANG environmental variable....

Redhat Linux

7.2

CVSSv2

restore 0.4b15 and earlier in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which allows local users to obtain root privileges by modifying the RSH variable to point to a Trojan horse program....

Redhat Linux3 EDB exploits available

3.6

CVSSv2

Vulnerability in gpm in Caldera Linux allows local users to delete arbitrary files or conduct a denial of service....

Conectiva Linux

2.1

CVSSv2

dispatch-conf in Portage 2.0.51-r2 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files....

Gentoo Linux

7.2

CVSSv2

Tomcat before 5.0.27-r3 in Gentoo Linux sets the default permissions on the init scripts as tomcat:tomcat, but executes the scripts with root privileges, which could allow local users in the tomcat group to execute arbitrary commands as root by modifying the scripts....

Gentoo Linux

1 2 3 4 5 NEXT »