Enterprise Linux

enterprise_linux

Vendor: Redhat • 1,952 CVEs

CVEs (1,952)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2004-0634 4Ethereal Group GentooMandrakesoft+1 more 5Enterprise Linux EtherealLinux+2 more Apr 16, 2026 Dec 6, 2004 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The SMB SID snooping capability in Ethereal 0.9.15 to 0.10.4 allows remote attackers to cause a denial of service (process crash) via a handle without a policy name, which causes a null dereference.
CVE-2004-0633 4Ethereal Group GentooMandrakesoft+1 more 5Enterprise Linux EtherealLinux+2 more Apr 16, 2026 Dec 6, 2004 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The iSNS dissector for Ethereal 0.10.3 through 0.10.4 allows remote attackers to cause a denial of service (process abort) via an integer overflow.
CVE-2004-0607 3Ipsec Tools KameRedhat 4Enterprise Linux Enterprise Linux DesktopIpsec Tools+1 more Apr 16, 2026 Dec 6, 2004 N/A· v4 N/A· v3 10.0 HIGH· v2 The eay_check_x509cert function in KAME Racoon successfully verifies certificates even when OpenSSL validation fails, which could allow remote attackers to bypass authentication.
CVE-2004-0497 7Conectiva GentooLinux+4 more 9Enterprise Linux LinuxLinux+6 more Apr 16, 2026 Dec 6, 2004 N/A· v4 N/A· v3 2.1 LOW· v2 Unknown vulnerability in Linux kernel 2.x may allow local users to modify the group ID of files, such as NFS exported files in kernel 2.4.
CVE-2004-0494 2Avaya Redhat 4Cvlan Enterprise LinuxEnterprise Linux Desktop+1 more Apr 16, 2026 Nov 23, 2004 N/A· v4 N/A· v3 7.5 HIGH· v2 Multiple extfs backend scripts for GNOME virtual file system (VFS) before 1.0.1 may allow remote attackers to perform certain unauthorized actions via a gnome-vfs URI.
CVE-2004-0112 244d AppleAvaya+21 more 65Aaa Server Access RegistrarApache Based Web Server+62 more Apr 16, 2026 Nov 23, 2004 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote attackers to cause a de...Show more The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that causes an out-of-bounds read.Show less
CVE-2004-0081 234d AppleAvaya+20 more 66Aaa Server Access RegistrarApache Based Web Server+63 more Apr 16, 2026 Nov 23, 2004 N/A· v4 N/A· v3 5.0 MEDIUM· v2 OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test Tool.
CVE-2004-0079 234d AppleAvaya+20 more 66Aaa Server Access RegistrarApache Based Web Server+63 more Apr 16, 2026 Nov 23, 2004 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.
CVE-2004-0750 1Redhat 2Enterprise Linux Enterprise Linux Desktop Apr 16, 2026 Oct 20, 2004 N/A· v4 N/A· v3 7.5 HIGH· v2 Unknown vulnerability in redhat-config-nfs before 1.0.13, when shares are exported to multiple hosts, can produce incorrect permissions and prevent the all_squash option from being applied.
CVE-2004-1613 3Mozilla RedhatSgi 7Enterprise Linux Enterprise Linux DesktopFedora Core+4 more Apr 16, 2026 Oct 18, 2004 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Mozilla allows remote attackers to cause a denial of service (application crash from null dereference or infinite loop) via a web page that contains a (1) TEXTAREA, (2) INPUT, (3) FRAMESET or (4) IMG tag followed by a nu...Show more Mozilla allows remote attackers to cause a denial of service (application crash from null dereference or infinite loop) via a web page that contains a (1) TEXTAREA, (2) INPUT, (3) FRAMESET or (4) IMG tag followed by a null character and some trailing characters, as demonstrated by mangleme.Show less
CVE-2004-0827 9Conectiva EnlightenmentImagemagick+6 more 14Enterprise Linux Enterprise Linux DesktopFedora Core+11 more Apr 16, 2026 Sep 16, 2004 N/A· v4 N/A· v3 7.5 HIGH· v2 Multiple buffer overflows in the ImageMagick graphics library 5.x before 5.4.4, and 6.x before 6.0.6.2, allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via malf...Show more Multiple buffer overflows in the ImageMagick graphics library 5.x before 5.4.4, and 6.x before 6.0.6.2, allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via malformed (1) AVI, (2) BMP, or (3) DIB files.Show less
CVE-2004-0809 8Apache DebianGentoo+5 more 12Debian Linux Enterprise LinuxEnterprise Linux Desktop+9 more Apr 16, 2026 Sep 16, 2004 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The mod_dav module in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service (child process crash) via a certain sequence of LOCK requests for a location that allows WebDAV authoring access.
CVE-2004-0905 5Conectiva MozillaNetscape+2 more 10Enterprise Linux Enterprise Linux DesktopFedora Core+7 more Apr 16, 2026 Sep 14, 2004 N/A· v4 N/A· v3 4.6 MEDIUM· v2 Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows remote attackers to perform cross-domain scripting and possibly execute arbitrary code by convincing a user to drag and...Show more Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows remote attackers to perform cross-domain scripting and possibly execute arbitrary code by convincing a user to drag and drop javascript: links to a frame or page in another domain.Show less
CVE-2004-0421 4Libpng OpenpkgRedhat+1 more 6Enterprise Linux Enterprise Linux DesktopLibpng+3 more Apr 16, 2026 Aug 18, 2004 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The Portable Network Graphics library (libpng) 1.0.15 and earlier allows attackers to cause a denial of service (crash) via a malformed PNG image file that triggers an error that causes an out-of-bounds read when creatin...Show more The Portable Network Graphics library (libpng) 1.0.15 and earlier allows attackers to cause a denial of service (crash) via a malformed PNG image file that triggers an error that causes an out-of-bounds read when creating the error message.Show less
CVE-2004-0557 4Conectiva GentooRedhat+1 more 6Enterprise Linux Enterprise Linux DesktopFedora Core+3 more Apr 16, 2026 Aug 6, 2004 N/A· v4 N/A· v3 10.0 HIGH· v2 Multiple buffer overflows in the st_wavstartread function in wav.c for Sound eXchange (SoX) 12.17.2 through 12.17.4 allow remote attackers to execute arbitrary code via certain WAV file header fields.
CVE-2004-0554 6Avaya ConectivaGentoo+3 more 18Converged Communications Server Enterprise LinuxIntuity Audix+15 more Apr 16, 2026 Aug 6, 2004 N/A· v4 N/A· v3 2.1 LOW· v2 Linux kernel 2.4.x and 2.6.x for x86 allows local users to cause a denial of service (system crash), possibly via an infinite loop that triggers a signal handler with a certain sequence of fsave and frstor instructions,...Show more Linux kernel 2.4.x and 2.6.x for x86 allows local users to cause a denial of service (system crash), possibly via an infinite loop that triggers a signal handler with a certain sequence of fsave and frstor instructions, as originally demonstrated using a "crash.c" program.Show less
CVE-2004-0495 6Avaya ConectivaGentoo+3 more 18Converged Communications Server Enterprise LinuxIntuity Audix+15 more Apr 16, 2026 Aug 6, 2004 N/A· v4 N/A· v3 7.2 HIGH· v2 Multiple unknown vulnerabilities in Linux kernel 2.4 and 2.6 allow local users to gain privileges or access kernel memory, as found by the Sparse source code checking tool.
CVE-2004-0111 3Gnome RedhatSgi 5Enterprise Linux Gdk PixbufGdkpixbuf+2 more Apr 16, 2026 Apr 15, 2004 N/A· v4 N/A· v3 5.0 MEDIUM· v2 gdk-pixbuf before 0.20 allows attackers to cause a denial of service (crash) via a malformed bitmap (BMP) file.
CVE-2004-0105 3Metamail Corporation RedhatSgi 4Enterprise Linux Linux Advanced WorkstationMetamail+1 more Apr 16, 2026 Mar 3, 2004 N/A· v4 N/A· v3 7.5 HIGH· v2 Multiple buffer overflows in Metamail 2.7 and earlier allow remote attackers to execute arbitrary code.
CVE-2004-0104 3Metamail Corporation RedhatSgi 4Enterprise Linux Linux Advanced WorkstationMetamail+1 more Apr 16, 2026 Mar 3, 2004 N/A· v4 N/A· v3 7.5 HIGH· v2 Multiple format string vulnerabilities in Metamail 2.7 and earlier allow remote attackers to execute arbitrary code.

Previous 1...94 95 969798 Next