CVEs (54)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
3Linux SgiSlackware3Linux Kernel PropackSlackware LinuxApr 16, 2026 Jul 7, 2004 N/A· v4 N/A· v3 7.2 HIGH· v2 Integer overflow in the ip_setsockopt function in Linux kernel 2.4.22 through 2.4.25 and 2.6.1 through 2.6.3 allows local users to cause a denial of service (crash) or execute arbitrary code via the MCAST_MSFILTER socket...Show more |
CVS server before 1.11.10 may allow attackers to cause the CVS server to create directories and files in the file system root directory via malformed module requests. |
4Andrew Tridgell EngardelinuxRedhat+1 more5Rsync RsyncSecure Community+2 moreApr 16, 2026 Dec 15, 2003 N/A· v4 N/A· v3 7.5 HIGH· v2 Heap-based buffer overflow in rsync before 2.5.7, when running in server mode, allows remote attackers to execute arbitrary code and possibly escape the chroot jail. |
CUPS before 1.1.19 allows remote attackers to cause a denial of service via a partial printing request to the IPP port (631), which does not time out. |
rc.M in Slackware 9.0 calls quotacheck with the -M option, which causes the filesystem to be remounted and possibly reset security-relevant mount flags such as nosuid, nodev, and noexec. |
4Gnome MandrakesoftRedhat+1 more4Bonobo LinuxMandrake Linux+1 moreApr 16, 2026 Dec 31, 2002 N/A· v4 N/A· v3 4.6 MEDIUM· v2 Buffer overflow in efstools in Bonobo, when installed setuid, allows local users to execute arbitrary code via long command line arguments. |
8Caldera DebianFreebsd+5 more9Debian Linux FreebsdLinux+6 moreApr 16, 2026 Feb 27, 2002 N/A· v4 N/A· v3 7.2 HIGH· v2 Heap corruption vulnerability in the "at" program allows local users to execute arbitrary code via a malformed execution time, which causes at to free the same memory twice. |
2Gnu Slackware2Findutils Slackware LinuxApr 16, 2026 Aug 31, 2001 N/A· v4 N/A· v3 7.2 HIGH· v2 GNU locate in findutils 4.1 on Slackware 7.1 and 8.0 allows local users to gain privileges via an old formatted filename database (locatedb) that contains an entry with an out-of-range offset, which causes locate to writ...Show more |
5Debian DigitalNetbsd+2 more5Debian Linux LinuxNetbsd+2 moreApr 16, 2026 Mar 12, 2001 N/A· v4 N/A· v3 5.0 MEDIUM· v2 traceroute in NetBSD 1.3.3 and Linux systems allows local unprivileged users to modify the source address of the packets, which could be used in spoofing attacks. |
5Debian DigitalNetbsd+2 more5Debian Linux LinuxNetbsd+2 moreApr 16, 2026 Mar 12, 2001 N/A· v4 N/A· v3 5.0 MEDIUM· v2 traceroute in NetBSD 1.3.3 and Linux systems allows local users to flood other systems by providing traceroute with a large waittime (-w) option, which is not parsed properly and sets the time delay for sending packets t...Show more |
5Debian MandrakesoftRedhat+2 more5Debian Linux LinuxMandrake Linux+2 moreApr 16, 2026 Nov 14, 2000 N/A· v4 N/A· v3 7.2 HIGH· v2 Kernel logging daemon (klogd) in Linux does not properly cleanse user-injected format strings, which allows local users to gain root privileges by triggering malformed kernel messages. |
13Caldera ConectivaDebian+10 more16Aix Debian LinuxImmunix+13 moreApr 16, 2026 Nov 14, 2000 N/A· v4 N/A· v3 10.0 HIGH· v2 Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via functions such as gettext and catopen. |
4Caldera SlackwareSuse+1 more4Openlinux Slackware LinuxSuse Linux+1 moreApr 16, 2026 May 22, 2000 N/A· v4 N/A· v3 7.2 HIGH· v2 Buffer overflow in fdmount on Linux systems allows local users in the "floppy" group to execute arbitrary commands via a long mountpoint parameter. |
login in Slackware 7.0 allows remote attackers to identify valid users on the system by reporting an encryption error when an account is locked or does not exist. |
2Slackware Suse2Slackware Linux Suse LinuxApr 16, 2026 Aug 16, 1999 N/A· v4 N/A· v3 5.0 MEDIUM· v2 A default configuration of in.identd in SuSE Linux waits 120 seconds between requests, allowing a remote attacker to conduct a denial of service. |
5Netbsd RedhatSlackware+2 more5Linux NetbsdSlackware Linux+2 moreApr 16, 2026 Mar 21, 1999 N/A· v4 N/A· v3 4.6 MEDIUM· v2 XFree86 startx command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial of service. |
During a reboot after an installation of Linux Slackware 3.6, a remote attacker can obtain root access by logging in to the root account without a password. |
7Caldera DebianProftpd Project+4 more8Debian Linux LinuxOpenlinux+5 moreApr 16, 2026 Feb 9, 1999 N/A· v4 N/A· v3 10.0 HIGH· v2 Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a. palmetto. |
The default configuration of Slackware 3.4, and possibly other versions, includes . (dot, the current directory) in the PATH environmental variable, which could allow local users to create Trojan horse programs that are...Show more |
login in Slackware Linux 3.2 through 3.5 does not properly check for an error when the /etc/group file is missing, which prevents it from dropping privileges, causing it to assign root privileges to any local user who lo...Show more |