CVEs (229)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
6Conectiva DebianFreebsd+3 more7Debian Linux FreebsdLinux+4 moreApr 16, 2026 Mar 12, 2001 N/A· v4 N/A· v3 7.2 HIGH· v2 Zope before 2.2.4 does not properly compute local roles, which could allow users to bypass specified access restrictions and gain privileges. |
3Immunix MandrakesoftRedhat3Immunix LinuxMandrake LinuxApr 16, 2026 Mar 12, 2001 N/A· v4 N/A· v3 1.2 LOW· v2 useradd program in shadow-utils program may allow local users to overwrite arbitrary files via a symlink attack. |
3Immunix MandrakesoftRedhat3Immunix LinuxMandrake LinuxApr 16, 2026 Mar 12, 2001 N/A· v4 N/A· v3 1.2 LOW· v2 getty_ps 2.0.7j allows local users to overwrite arbitrary files via a symlink attack. |
3Immunix MandrakesoftRedhat3Immunix LinuxMandrake LinuxApr 16, 2026 Mar 12, 2001 N/A· v4 N/A· v3 1.2 LOW· v2 rdist 6.1.5 allows local users to overwrite arbitrary files via a symlink attack. |
4Immunix MandrakesoftRedhat+1 more5Immunix LinuxMandrake Linux+2 moreApr 16, 2026 Mar 12, 2001 N/A· v4 N/A· v3 1.2 LOW· v2 sdiff 2.7 in the diffutils package allows local users to overwrite files via a symlink attack. |
3Immunix MandrakesoftRedhat3Immunix LinuxMandrake LinuxApr 16, 2026 Mar 12, 2001 N/A· v4 N/A· v3 1.2 LOW· v2 gpm 1.19.3 allows local users to overwrite arbitrary files via a symlink attack. |
5Debian DigitalNetbsd+2 more5Debian Linux LinuxNetbsd+2 moreApr 16, 2026 Mar 12, 2001 N/A· v4 N/A· v3 5.0 MEDIUM· v2 traceroute in NetBSD 1.3.3 and Linux systems allows local unprivileged users to modify the source address of the packets, which could be used in spoofing attacks. |
5Debian DigitalNetbsd+2 more5Debian Linux LinuxNetbsd+2 moreApr 16, 2026 Mar 12, 2001 N/A· v4 N/A· v3 5.0 MEDIUM· v2 traceroute in NetBSD 1.3.3 and Linux systems allows local users to flood other systems by providing traceroute with a large waittime (-w) option, which is not parsed properly and sets the time delay for sending packets t...Show more |
Buffer overflow in pam_localuser PAM module in Red Hat Linux 7.x and 6.x allows attackers to gain privileges. |
7Caldera ConectivaHp+4 more9Hp Ux ImmunixLinux+6 moreApr 16, 2026 Jan 9, 2001 N/A· v4 N/A· v3 7.2 HIGH· v2 Multiple shell programs on various Unix systems, including (1) tcsh, (2) csh, (3) sh, and (4) bash, follow symlinks when processing << redirects (aka here-documents or in-here documents), which allows local users to over...Show more |
restore 0.4b15 and earlier in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which allows local users to obtain root privileges by modifying the RSH variable to point to a Trojan horse...Show more |
5Conectiva ImmunixMandrakesoft+2 more5Immunix LinuxLinux+2 moreApr 16, 2026 Jan 9, 2001 N/A· v4 N/A· v3 7.2 HIGH· v2 modprobe in the modutils 2.3.x package on Linux systems allows a local user to execute arbitrary commands via shell metacharacters. |
5Freebsd GnuImmunix+2 more5Freebsd ImmunixLinux+2 moreJul 23, 2026 Dec 19, 2000 N/A· v4 N/A· v3 7.2 HIGH· v2 Buffer overflow in ncurses library allows local users to execute arbitrary commands via long environmental information such as TERM or TERMINFO_DIRS. |
Glint in Red Hat Linux 5.2 allows local users to overwrite arbitrary files and cause a denial of service via a symlink attack. |
3Caldera RedhatTrustix6Linux OpenlinuxOpenlinux Ebuilder+3 moreApr 16, 2026 Dec 19, 2000 N/A· v4 N/A· v3 10.0 HIGH· v2 Format string vulnerability in use_syslog() function in LPRng 3.6.24 allows remote attackers to execute arbitrary commands. |
Format string vulnerability in talkd in OpenBSD and possibly other BSD-based OSes allows remote attackers to execute arbitrary commands via a user name that contains format characters. |
dump in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which allows local users to obtain root privileges by modifying the RSH variable to point to a Trojan horse program. |
5Debian MandrakesoftRedhat+2 more5Debian Linux LinuxMandrake Linux+2 moreApr 16, 2026 Nov 14, 2000 N/A· v4 N/A· v3 7.2 HIGH· v2 Kernel logging daemon (klogd) in Linux does not properly cleanse user-injected format strings, which allows local users to gain root privileges by triggering malformed kernel messages. |
13Caldera ConectivaDebian+10 more16Aix Debian LinuxImmunix+13 moreApr 16, 2026 Nov 14, 2000 N/A· v4 N/A· v3 10.0 HIGH· v2 Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via functions such as gettext and catopen. |
The tmpwatch utility in Red Hat Linux forks a new process for each directory level, which allows local users to cause a denial of service by creating deeply nested directories in /tmp or /var/tmp/. |