Debian Linux

debian_linux

Vendor: Debian • 10,011 CVEs

CVEs (10,011)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2004-0837 3Debian MysqlOracle 3Debian Linux MysqlMysql Apr 16, 2026 Nov 3, 2004 N/A· v4 N/A· v3 2.6 LOW· v2 MySQL 4.x before 4.0.21, and 3.x before 3.23.49, allows attackers to cause a denial of service (crash or hang) via multiple threads that simultaneously alter MERGE table UNIONs.
CVE-2004-0836 2Debian Oracle 2Debian Linux Mysql Apr 16, 2026 Nov 3, 2004 N/A· v4 N/A· v3 10.0 HIGH· v2 Buffer overflow in the mysql_real_connect function in MySQL 4.x before 4.0.21, and 3.x before 3.23.49, allows remote DNS servers to cause a denial of service and possibly execute arbitrary code via a DNS response with a...Show more Buffer overflow in the mysql_real_connect function in MySQL 4.x before 4.0.21, and 3.x before 3.23.49, allows remote DNS servers to cause a denial of service and possibly execute arbitrary code via a DNS response with a large address length (h_length).Show less
CVE-2004-0835 3Debian MysqlOracle 3Debian Linux MysqlMysql Apr 16, 2026 Nov 3, 2004 N/A· v4 N/A· v3 7.5 HIGH· v2 MySQL 3.x before 3.23.59, 4.x before 4.0.19, 4.1.x before 4.1.2, and 5.x before 5.0.1, checks the CREATE/INSERT rights of the original table instead of the target table in an ALTER TABLE RENAME operation, which could all...Show more MySQL 3.x before 3.23.59, 4.x before 4.0.19, 4.1.x before 4.1.2, and 5.x before 5.0.1, checks the CREATE/INSERT rights of the original table instead of the target table in an ALTER TABLE RENAME operation, which could allow attackers to conduct unauthorized activities.Show less
CVE-2004-0772 3Debian MitOpenpkg 3Debian Linux Kerberos 5Openpkg Apr 16, 2026 Oct 20, 2004 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Double free vulnerabilities in error handling code in krb524d for MIT Kerberos 5 (krb5) 1.2.8 and earlier may allow remote attackers to execute arbitrary code.
CVE-2004-0689 2Debian Kde 2Debian Linux Kde Apr 16, 2026 Sep 28, 2004 N/A· v4 7.1 HIGH· v3 4.6 MEDIUM· v2 KDE before 3.3.0 does not properly handle when certain symbolic links point to "stale" locations, which could allow local users to create or truncate arbitrary files.
CVE-2004-0643 3Debian MitRedhat 5Debian Linux Enterprise Linux DesktopEnterprise Linux Server+2 more Apr 16, 2026 Sep 28, 2004 N/A· v4 N/A· v3 4.6 MEDIUM· v2 Double free vulnerability in the krb5_rd_cred function for MIT Kerberos 5 (krb5) 1.3.1 and earlier may allow local users to execute arbitrary code.
CVE-2004-0642 3Debian MitRedhat 5Debian Linux Enterprise Linux DesktopEnterprise Linux Server+2 more Apr 16, 2026 Sep 28, 2004 N/A· v4 N/A· v3 7.5 HIGH· v2 Double free vulnerabilities in the error handling code for ASN.1 decoders in the (1) Key Distribution Center (KDC) library and (2) client library for MIT Kerberos 5 (krb5) 1.3.4 and earlier may allow remote attackers to...Show more Double free vulnerabilities in the error handling code for ASN.1 decoders in the (1) Key Distribution Center (KDC) library and (2) client library for MIT Kerberos 5 (krb5) 1.3.4 and earlier may allow remote attackers to execute arbitrary code.Show less
CVE-2004-0458 2Debian Nicolas Boullis 2Debian Linux Mah Jong Apr 16, 2026 Sep 28, 2004 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 mah-jong before 1.6.2 allows remote attackers to cause a denial of service (server crash) via a missing argument, which triggers a null pointer dereference.
CVE-2004-0809 8Apache DebianGentoo+5 more 12Debian Linux Enterprise LinuxEnterprise Linux Desktop+9 more Apr 16, 2026 Sep 16, 2004 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The mod_dav module in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service (child process crash) via a certain sequence of LOCK requests for a location that allows WebDAV authoring access.
CVE-2004-0583 3Debian UserminWebmin 3Debian Linux UserminWebmin Apr 16, 2026 Aug 6, 2004 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The account lockout functionality in (1) Webmin 1.140 and (2) Usermin 1.070 does not parse certain character strings, which allows remote attackers to conduct a brute force attack to guess user IDs and passwords.
CVE-2004-0579 2Debian William Deich 2Debian Linux Super Apr 16, 2026 Aug 6, 2004 N/A· v4 N/A· v3 7.2 HIGH· v2 Format string vulnerability in super before 3.23 allows local users to execute arbitrary code as root.
CVE-2004-0522 2Debian Gallery Project 2Debian Linux Gallery Apr 16, 2026 Aug 6, 2004 N/A· v4 N/A· v3 10.0 HIGH· v2 Gallery 1.4.3 and earlier allows remote attackers to bypass authentication and obtain Gallery administrator privileges.
CVE-2004-0594 6Avaya DebianHp+3 more 6Converged Communications Server Debian LinuxHp Ux+3 more Apr 16, 2026 Jul 27, 2004 N/A· v4 N/A· v3 5.1 MEDIUM· v2 The memory_limit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain conditions such as when register_globals is enabled, allows remote attackers to execute arbitrary code by triggering a memory_l...Show more The memory_limit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain conditions such as when register_globals is enabled, allows remote attackers to execute arbitrary code by triggering a memory_limit abort during execution of the zend_hash_init function and overwriting a HashTable destructor pointer before the initialization of key data structures is complete.Show less
CVE-2004-0488 3Apache DebianRedhat 4Debian Linux Enterprise Linux ServerEnterprise Linux Workstation+1 more Apr 16, 2026 Jul 7, 2004 N/A· v4 N/A· v3 7.5 HIGH· v2 Stack-based buffer overflow in the ssl_util_uuencode_binary function in ssl_util.c for Apache mod_ssl, when mod_ssl is configured to trust the issuing CA, may allow remote attackers to execute arbitrary code via a client...Show more Stack-based buffer overflow in the ssl_util_uuencode_binary function in ssl_util.c for Apache mod_ssl, when mod_ssl is configured to trust the issuing CA, may allow remote attackers to execute arbitrary code via a client certificate with a long subject DN.Show less
CVE-2004-0434 2Debian Heimdal Project 2Debian Linux Heimdal Apr 16, 2026 Jul 7, 2004 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 k5admind (kadmind) for Heimdal allows remote attackers to execute arbitrary code via a Kerberos 4 compatibility administration request whose framing length is less than 2, which leads to a heap-based buffer overflow.
CVE-2004-0398 2Debian Webdav 3Cadaver Debian LinuxNeon Apr 16, 2026 Jul 7, 2004 N/A· v4 N/A· v3 7.5 HIGH· v2 Heap-based buffer overflow in the ne_rfc1036_parse date parsing function for the neon library (libneon) 0.24.5 and earlier, as used by cadaver before 0.22, allows remote WebDAV servers to execute arbitrary code on the cl...Show more Heap-based buffer overflow in the ne_rfc1036_parse date parsing function for the neon library (libneon) 0.24.5 and earlier, as used by cadaver before 0.22, allows remote WebDAV servers to execute arbitrary code on the client.Show less
CVE-2004-0179 2Debian Webdav 2Debian Linux Neon Apr 16, 2026 Jun 1, 2004 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Multiple format string vulnerabilities in (1) neon 0.24.4 and earlier, and other products that use neon including (2) Cadaver, (3) Subversion, and (4) OpenOffice, allow remote malicious WebDAV servers to execute arbitrar...Show more Multiple format string vulnerabilities in (1) neon 0.24.4 and earlier, and other products that use neon including (2) Cadaver, (3) Subversion, and (4) OpenOffice, allow remote malicious WebDAV servers to execute arbitrary code.Show less
CVE-2003-0648 2Debian Fte 2Debian Linux Fte Text Editor Apr 16, 2026 May 4, 2004 N/A· v4 N/A· v3 10.0 HIGH· v2 Multiple buffer overflows in vfte, based on FTE, before 0.50, allow local users to execute arbitrary code.
CVE-2003-0618 2Debian Perl 2Debian Linux Suidperl Apr 16, 2026 May 4, 2004 N/A· v4 N/A· v3 2.1 LOW· v2 Multiple vulnerabilities in suidperl 5.6.1 and earlier allow a local user to obtain sensitive information about files for which the user does not have appropriate permissions.
CVE-2004-1180 3Debian MandrakesoftSun 5Debian Linux Mandrake LinuxMandrake Linux Corporate Server+2 more Apr 16, 2026 Feb 16, 2004 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Unknown vulnerability in the rwho daemon (rwhod) before 0.17, on little endian architectures, allows remote attackers to cause a denial of service (application crash).

Previous 1...494495496...501 Next