National Vulnerability Database

National Vulnerability Database

National Vulnerability
Database

Search Results (Refine Search)

Search Parameters:
  • Contains Software Flaws (CVE)
  • CPE Product Version: cpe:/o:debian:debian_linux:1.3
There are 40 matching records.
Displaying matches 21 through 40.
Vuln ID Summary CVSS Severity
CVE-2006-7236

The default configuration of xterm on Debian GNU/Linux sid and possibly Ubuntu enables the allowWindowOps resource, which allows user-assisted attackers to execute arbitrary code or have unspecified other impact via escape sequences.

Published: January 02, 2009; 01:11:09 PM -05:00
    V2: 9.3 HIGH
CVE-2008-4908

maps/Info/combine.pl in CrossFire crossfire-maps 1.11.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary file.

Published: November 03, 2008; 07:57:30 PM -05:00
    V2: 3.3 LOW
CVE-2008-4553

qemu-make-debian-root in qemu 0.9.1-5 on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on temporary files and directories.

Published: October 15, 2008; 04:07:42 PM -04:00
    V2: 7.2 HIGH
CVE-2008-3234

sshd in OpenSSH 4 on Debian GNU/Linux, and the 20070303 OpenSSH snapshot, allows remote authenticated users to obtain access to arbitrary SELinux roles by appending a :/ (colon slash) sequence, followed by the role name, to the username.

Published: July 18, 2008; 12:41:00 PM -04:00
    V2: 6.5 MEDIUM
CVE-2008-0930

w_editeur.c in XWine 1.0.1 for Debian GNU/Linux allows local users to overwrite or print arbitrary files via a symlink attack on the temporaire temporary file. NOTE: some of these details are obtained from third party information.

Published: March 03, 2008; 07:44:00 PM -05:00
    V2: 7.2 HIGH
CVE-2008-0931

w_export.c in XWine 1.0.1 on Debian GNU/Linux sets insecure permissions (0666) for /etc/wine/config, which might allow local users to execute arbitrary commands or cause a denial of service by modifying the file.

Published: March 03, 2008; 07:44:00 PM -05:00
    V2: 6.3 MEDIUM
CVE-2007-6418

The libdspam7-drv-mysql cron job in Debian GNU/Linux includes the MySQL dspam database password in a command line argument, which might allow local users to read the password by listing the process and its arguments.

Published: December 17, 2007; 07:46:00 PM -05:00
    V2: 2.1 LOW
CVE-2007-6211

Send ICMP Nasty Garbage (sing) on Debian GNU/Linux allows local users to append to arbitrary files and gain privileges via the -L (output log file) option. NOTE: this issue is only a vulnerability in limited environments, since sing is not installed setuid, and the administrator would need to override a non-setuid default during installation.

Published: December 03, 2007; 08:46:00 PM -05:00
    V2: 7.2 HIGH
CVE-2007-5795

The hack-local-variables function in Emacs before 22.2, when enable-local-variables is set to :safe, does not properly search lists of unsafe or risky variables, which might allow user-assisted attackers to bypass intended restrictions and modify critical program variables via a file containing a Local variables declaration.

Published: November 02, 2007; 06:46:00 PM -04:00
    V2: 6.3 MEDIUM
CVE-2007-5193

The default configuration for twiki 4.1.2 on Debian GNU/Linux, and possibly other operating systems, specifies the work area directory (cfg{RCS}{WorkAreaDir}) under the web document root, which might allow remote attackers to obtain sensitive information when .htaccess restrictions are not applied.

Published: October 04, 2007; 12:17:00 PM -04:00
    V2: 5.0 MEDIUM
CVE-2007-2797

xterm, including 192-7.el4 in Red Hat Enterprise Linux and 208-3.1 in Debian GNU/Linux, sets the wrong group ownership of tty devices, which allows local users to write data to other users' terminals.

Published: August 27, 2007; 01:17:00 PM -04:00
    V2: 2.1 LOW
CVE-2007-2835

Multiple stack-based buffer overflows in (1) CCE_pinyin.c and (2) xl_pinyin.c in ImmModules/cce/ in unicon-imc2 3.0.4, as used by zhcon and other applications, allow local users to gain privileges via a long HOME environment variable.

Published: July 02, 2007; 09:30:00 PM -04:00
    V2: 6.8 MEDIUM
CVE-2001-0738

LogLine function in klogd in sysklogd 1.3 in various Linux distributions allows an attacker to cause a denial of service (hang) by causing null bytes to be placed in log messages.

Published: October 18, 2001; 12:00:00 AM -04:00
    V2: 5.0 MEDIUM
CVE-2001-0763

Buffer overflow in Linux xinetd 2.1.8.9pre11-1 and earlier may allow remote attackers to execute arbitrary code via a long ident response, which is not properly handled by the svc_logprint function.

Published: October 18, 2001; 12:00:00 AM -04:00
    V2: 7.5 HIGH
CVE-2001-0430

Vulnerability in exuberant-ctags before 3.2.4-0.1 insecurely creates temporary files.

Published: July 02, 2001; 12:00:00 AM -04:00
    V2: 3.6 LOW
CVE-2001-0441

Buffer overflow in (1) wrapping and (2) unwrapping functions of slrn news reader before 0.9.7.0 allows remote attackers to execute arbitrary commands via a long message header.

Published: June 27, 2001; 12:00:00 AM -04:00
    V2: 7.5 HIGH
CVE-1999-0457

Linux ftpwatch program allows local users to gain root privileges.

Published: January 17, 1999; 12:00:00 AM -05:00
    V2: 7.2 HIGH
CVE-1999-0389

Buffer overflow in the bootp server in the Debian Linux netstd package.

Published: January 03, 1999; 12:00:00 AM -05:00
    V2: 7.2 HIGH
CVE-1999-0914

Buffer overflow in the FTP client in the Debian GNU/Linux netstd package.

Published: January 03, 1999; 12:00:00 AM -05:00
    V2: 7.2 HIGH
CVE-1999-0038

Buffer overflow in xlock program allows local users to execute commands as root.

Published: April 26, 1997; 12:00:00 AM -04:00
    V2: 7.2 HIGH