Debian Linux

debian_linux

Vendor: Debian • 10,011 CVEs

CVEs (10,011)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2003-0615 3Cgi.pm DebianOpenpkg 3Cgi.pm Debian LinuxOpenpkg Apr 16, 2026 Aug 27, 2003 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in start_form() of CGI.pm allows remote attackers to insert web script via a URL that is fed into the form's action parameter.
CVE-2003-0440 2Debian Semi 2Debian Linux Semi Apr 16, 2026 Aug 18, 2003 N/A· v4 N/A· v3 4.6 MEDIUM· v2 The (1) semi MIME library 1.14.5 and earlier, and (2) wemi 1.14.0 and possibly other versions, allows local users to overwrite arbitrary files via a symlink attack on temporary files.
CVE-2003-0385 1Debian 1Debian Linux Apr 16, 2026 Jul 2, 2003 N/A· v4 N/A· v3 7.2 HIGH· v2 Buffer overflow in xaos 3.0-23 and earlier, when running setuid, allows local users to gain root privileges via a long -language option.
CVE-2003-0382 2Debian Michael Jennings 2Debian Linux Eterm Apr 16, 2026 Jul 2, 2003 N/A· v4 N/A· v3 4.6 MEDIUM· v2 Buffer overflow in Eterm 0.9.2 allows local users to gain privileges via a long ETERMPATH environment variable.
CVE-2003-0367 2Debian Gnu 2Debian Linux Gzip Apr 16, 2026 Jul 2, 2003 N/A· v4 N/A· v3 2.1 LOW· v2 znew in the gzip package allows local users to overwrite arbitrary files via a symlink attack on temporary files.
CVE-2003-0362 1Debian 1Debian Linux Apr 16, 2026 Jun 9, 2003 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Buffer overflow in gPS before 0.10.2 may allow local users to cause a denial of service (SIGSEGV) in rgpsp via long command lines.
CVE-2003-0361 1Debian 1Debian Linux Apr 16, 2026 Jun 9, 2003 N/A· v4 N/A· v3 7.5 HIGH· v2 gPS before 1.1.0 does not properly follow the rgpsp connection source acceptation policy as specified in the rgpsp.conf file, which could allow unauthorized remote attackers to connect to rgpsp.
CVE-2003-0360 1Debian 1Debian Linux Apr 16, 2026 Jun 9, 2003 N/A· v4 N/A· v3 7.5 HIGH· v2 Multiple buffer overflows in gPS before 1.0.0 allow attackers to cause a denial of service and possibly execute arbitrary code.
CVE-2003-0358 3Debian Falconseye ProjectNethack 3Debian Linux FalconseyeNethack Apr 16, 2026 Jun 9, 2003 N/A· v4 N/A· v3 4.6 MEDIUM· v2 Buffer overflow in (1) nethack 3.4.0 and earlier, and (2) falconseye 1.9.3 and earlier, which is based on nethack, allows local users to gain privileges via a long -s command line option.
CVE-2003-0308 2Debian Sendmail 2Debian Linux Sendmail Apr 16, 2026 May 15, 2003 N/A· v4 N/A· v3 7.2 HIGH· v2 The Sendmail 8.12.3 package in Debian GNU/Linux 3.0 does not securely create temporary files, which could allow local users to gain additional privileges via (1) expn, (2) checksendmail, or (3) doublebounce.pl.
CVE-2003-0098 2Apcupsd Debian 2Apcupsd Debian Linux Apr 16, 2026 Mar 3, 2003 N/A· v4 N/A· v3 10.0 HIGH· v2 Unknown vulnerability in apcupsd before 3.8.6, and 3.10.x before 3.10.5, allows remote attackers to gain root privileges, possibly via format strings in a request to a slave server.
CVE-2002-2185 6Debian MandrakesoftMicrosoft+3 more 11Debian Linux Enterprise LinuxEnterprise Linux Desktop+8 more Apr 16, 2026 Dec 31, 2002 N/A· v4 N/A· v3 4.9 MEDIUM· v2 The Internet Group Management Protocol (IGMP) allows local users to cause a denial of service via an IGMP membership report to a target's Ethernet address instead of the Multicast group address, which causes the target t...Show more The Internet Group Management Protocol (IGMP) allows local users to cause a denial of service via an IGMP membership report to a target's Ethernet address instead of the Multicast group address, which causes the target to stop sending reports to the router and effectively disconnect the group from the network.Show less
CVE-2002-1372 2Apple Debian 3Cups Debian LinuxMac Os X Apr 16, 2026 Dec 26, 2002 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly check the return values of various file and socket operations, which could allow a remote attacker to cause a denial of service (resource exhaust...Show more Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly check the return values of various file and socket operations, which could allow a remote attacker to cause a denial of service (resource exhaustion) by causing file descriptors to be assigned and not released, as demonstrated by fanta.Show less
CVE-2002-1235 3Debian KthMit 4Debian Linux Kerberos 5Kth Kerberos 4+1 more Apr 16, 2026 Nov 4, 2002 N/A· v4 N/A· v3 10.0 HIGH· v2 The kadm_ser_in function in (1) the Kerberos v4compatibility administration daemon (kadmind4) in the MIT Kerberos 5 (krb5) krb5-1.2.6 and earlier, (2) kadmind in KTH Kerberos 4 (eBones) before 1.2.1, and (3) kadmind in K...Show more The kadm_ser_in function in (1) the Kerberos v4compatibility administration daemon (kadmind4) in the MIT Kerberos 5 (krb5) krb5-1.2.6 and earlier, (2) kadmind in KTH Kerberos 4 (eBones) before 1.2.1, and (3) kadmind in KTH Kerberos 5 (Heimdal) before 0.5.1 when compiled with Kerberos 4 support, does not properly verify the length field of a request, which allows remote attackers to execute arbitrary code via a buffer overflow attack.Show less
CVE-2002-1232 3Debian HpRedhat 3Debian Linux LinuxSecure Os Apr 16, 2026 Nov 4, 2002 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Memory leak in ypdb_open in yp_db.c for ypserv before 2.5 in the NIS package 3.9 and earlier allows remote attackers to cause a denial of service (memory consumption) via a large number of requests for a map that does no...Show more Memory leak in ypdb_open in yp_db.c for ypserv before 2.5 in the NIS package 3.9 and earlier allows remote attackers to cause a denial of service (memory consumption) via a large number of requests for a map that does not exist.Show less
CVE-2002-0839 2Apache Debian 2Debian Linux Http Server Apr 16, 2026 Oct 11, 2002 N/A· v4 N/A· v3 7.2 HIGH· v2 The shared memory scoreboard in the HTTP daemon for Apache 1.3.x before 1.3.27 allows any user running as the Apache UID to send a SIGUSR1 signal to any process as root, resulting in a denial of service (process kill) or...Show more The shared memory scoreboard in the HTTP daemon for Apache 1.3.x before 1.3.27 allows any user running as the Apache UID to send a SIGUSR1 signal to any process as root, resulting in a denial of service (process kill) or possibly other behaviors that would not normally be allowed, by modifying the parent[].pid and parent[].last_rtime segments in the scoreboard.Show less
CVE-2002-0912 1Debian 1Debian Linux Apr 16, 2026 Oct 4, 2002 N/A· v4 N/A· v3 5.0 MEDIUM· v2 in.uucpd UUCP server in Debian GNU/Linux 2.2, and possibly other operating systems, does not properly terminate long strings, which allows remote attackers to cause a denial of service, possibly due to a buffer overflow.
CVE-2002-0875 2Debian Sgi 3Debian Linux FamIrix Apr 16, 2026 Sep 5, 2002 N/A· v4 N/A· v3 2.1 LOW· v2 Vulnerability in FAM 2.6.8, 2.6.6, and other versions allows unprivileged users to obtain the names of files whose access is restricted to the root group.
CVE-2002-0392 2Apache Debian 2Debian Linux Http Server Apr 16, 2026 Jul 3, 2002 N/A· v4 N/A· v3 7.5 HIGH· v2 Apache 1.3 through 1.3.24, and Apache 2.0 through 2.0.36, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a chunk-encoded HTTP request that causes Apache to use an incorrect s...Show more Apache 1.3 through 1.3.24, and Apache 2.0 through 2.0.36, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a chunk-encoded HTTP request that causes Apache to use an incorrect size.Show less
CVE-2002-0401 2Debian Ethereal 2Debian Linux Ethereal Apr 16, 2026 Jun 18, 2002 N/A· v4 7.5 HIGH· v3 7.5 HIGH· v2 SMB dissector in Ethereal 0.9.3 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via malformed packets that cause Ethereal to dereference a NULL pointer.

Previous 1...495496497...501 Next