Vulnerabilities (CVE)

Filtered by vendor Debian Subscribe
Total 8991 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-1999-0769 4 Caldera, Debian, Paul Vixie and 1 more 4 Openlinux, Debian Linux, Vixie Cron and 1 more 2008-09-09 7.2 HIGH N/A
Vixie Cron on Linux systems allows local users to set parameters of sendmail commands via the MAILTO environmental variable.
CVE-1999-0742 1 Debian 1 Debian Linux 2008-09-09 5.0 MEDIUM N/A
The Debian mailman package uses weak authentication, which allows attackers to gain privileges.
CVE-1999-0457 1 Debian 1 Debian Linux 2008-09-09 7.2 HIGH N/A
Linux ftpwatch program allows local users to gain root privileges.
CVE-1999-0434 5 Caldera, Debian, Netbsd and 2 more 5 Openlinux, Debian Linux, Netbsd and 2 more 2008-09-09 7.5 HIGH N/A
XFree86 xfs command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial of service.
CVE-1999-0405 4 Debian, Freebsd, Redhat and 1 more 4 Debian Linux, Freebsd, Linux and 1 more 2008-09-09 7.2 HIGH N/A
A buffer overflow in lsof allows local users to obtain root privilege.
CVE-1999-0389 1 Debian 1 Debian Linux 2008-09-09 7.2 HIGH N/A
Buffer overflow in the bootp server in the Debian Linux netstd package.
CVE-1999-0048 3 Debian, Ibm, Nec 5 Netkit, Aix, Asl Ux 4800 and 2 more 2008-09-09 10.0 HIGH N/A
Talkd, when given corrupt DNS information, can be used to execute arbitrary commands with root privileges.
CVE-2008-0931 2 Debian, Xwine 2 Debian Linux, Xwine 2008-09-05 6.3 MEDIUM N/A
w_export.c in XWine 1.0.1 on Debian GNU/Linux sets insecure permissions (0666) for /etc/wine/config, which might allow local users to execute arbitrary commands or cause a denial of service by modifying the file.
CVE-2008-0930 2 Debian, Freshmeat 2 Debian Linux, Xwine 2008-09-05 7.2 HIGH N/A
w_editeur.c in XWine 1.0.1 for Debian GNU/Linux allows local users to overwrite or print arbitrary files via a symlink attack on the temporaire temporary file. NOTE: some of these details are obtained from third party information.
CVE-2008-0162 2 Debian, Sam Lantinga 2 Debian Linux, Splitvt 2008-09-05 7.2 HIGH N/A
misc.c in splitvt 1.6.6 and earlier does not drop group privileges before executing xprop, which allows local users to gain privileges.
CVE-2007-6415 1 Debian 1 Debian Linux 2008-09-05 8.5 HIGH N/A
scponly 4.6 and earlier allows remote authenticated users to bypass intended restrictions and execute arbitrary code by invoking scp, as implemented by OpenSSH, with the -F and -o options.
CVE-2007-2833 3 Debian, Gnu, Mandrakesoft 4 Debian Linux, Emacs, Mandrake Linux and 1 more 2008-09-05 7.8 HIGH N/A
Emacs 21 allows user-assisted attackers to cause a denial of service (crash) via certain crafted images, as demonstrated via a GIF image in vm mode, related to image size calculation.
CVE-2006-1772 1 Debian 1 Debian Linux 2008-09-05 7.2 HIGH N/A
debconf in Debian GNU/Linux, when configuring mnogosearch in the mnogosearch-common 3.2.31-1 package, uses the world-readable config.dat file instead of the restricted passwords.dat for storing the cleartext database administrator password in the mnogosearch-common/database_admin_pass record, which allows local users to view the password.
CVE-2005-4728 1 Debian 1 Amaya 2008-09-05 4.6 MEDIUM N/A
Untrusted search path vulnerability (RPATH) in amaya 9.2.1 on Debian GNU/Linux allows local users to gain privileges via a malicious Mesa library in the /home/anand directory.
CVE-2005-2214 1 Debian 1 Apt-setup 2008-09-05 4.6 MEDIUM N/A
apt-setup in Debian GNU/Linux installs the apt.conf file with insecure permissions, which allows local users to obtain sensitive information such as passwords.
CVE-2005-1855 2 Debian, Sukria 2 Debian Linux, Backup Manager 2008-09-05 2.1 LOW N/A
Backup Manager (backup-manager) before 0.5.8 creates backup files with world-readable default permissions, which allows local users to obtain sensitive information.
CVE-2005-1152 1 Debian 1 Qpopper 2008-09-05 2.1 LOW N/A
popauth.c in qpopper 4.0.5 and earlier does not properly set the umask, which may cause qpopper to create files with group or world-writable permissions.
CVE-2005-1151 1 Debian 1 Qpopper 2008-09-05 7.2 HIGH N/A
qpopper 4.0.5 and earlier does not properly drop privileges before processing certain user-supplied files, which allows local users to overwrite or create arbitrary files as root.
CVE-2005-0107 1 Debian 1 Bsmtpd 2008-09-05 7.5 HIGH N/A
bsmtpd 2.3 and earlier does not properly sanitize e-mail addresses, which allows remote attackers to execute arbitrary commands.
CVE-2005-0073 1 Debian 1 Sympa 2008-09-05 4.6 MEDIUM N/A
Buffer overflow in queue.c in a support script for sympa 3.3.3, when running setuid, allows local users to execute arbitrary code.