Debian

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2004-1176 6Debian GentooMidnight Commander+3 more 8Debian Linux Enterprise LinuxLinux+5 more Apr 16, 2026 Apr 14, 2005 N/A· v4 N/A· v3 7.5 HIGH· v2 Buffer underflow in extfs.c in Midnight Commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code.
CVE-2004-1175 6Debian GentooMidnight Commander+3 more 8Debian Linux Enterprise LinuxLinux+5 more Apr 16, 2026 Apr 14, 2005 N/A· v4 N/A· v3 7.5 HIGH· v2 fish.c in midnight commander allows remote attackers to execute arbitrary programs via "insecure filename quoting," possibly using shell metacharacters.
CVE-2004-1174 6Debian GentooMidnight Commander+3 more 8Debian Linux Enterprise LinuxLinux+5 more Apr 16, 2026 Apr 14, 2005 N/A· v4 N/A· v3 5.0 MEDIUM· v2 direntry.c in Midnight Commander (mc) 4.5.55 and earlier allows attackers to cause a denial of service by "manipulating non-existing file handles."
CVE-2004-1093 6Debian GentooMidnight Commander+3 more 8Debian Linux Enterprise LinuxLinux+5 more Apr 16, 2026 Apr 14, 2005 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service via "use of already freed memory."
CVE-2004-1092 6Debian GentooMidnight Commander+3 more 8Debian Linux Enterprise LinuxLinux+5 more Apr 16, 2026 Apr 14, 2005 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service by causing mc to free unallocated memory.
CVE-2004-1091 6Debian GentooMidnight Commander+3 more 8Debian Linux Enterprise LinuxLinux+5 more Apr 16, 2026 Apr 14, 2005 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service by triggering a null dereference.
CVE-2004-1090 6Debian GentooMidnight Commander+3 more 8Debian Linux Enterprise LinuxLinux+5 more Apr 16, 2026 Apr 14, 2005 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service via "a corrupt section header."
CVE-2004-1009 6Debian GentooMidnight Commander+3 more 8Debian Linux Enterprise LinuxLinux+5 more Apr 16, 2026 Apr 14, 2005 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service (infinite loop) via unknown attack vectors.
CVE-2004-1005 6Debian GentooMidnight Commander+3 more 8Debian Linux Enterprise LinuxLinux+5 more Apr 16, 2026 Apr 14, 2005 N/A· v4 N/A· v3 7.5 HIGH· v2 Multiple buffer overflows in Midnight Commander (mc) 4.5.55 and earlier allow remote attackers to have an unknown impact.
CVE-2004-1004 6Debian GentooMidnight Commander+3 more 8Debian Linux Enterprise LinuxLinux+5 more Apr 16, 2026 Apr 14, 2005 N/A· v4 N/A· v3 7.5 HIGH· v2 Multiple format string vulnerabilities in Midnight Commander (mc) 4.5.55 and earlier allow remote attackers to have an unknown impact.
CVE-2004-1052 3Bnc DebianGentoo 3Bnc Debian LinuxLinux Apr 16, 2026 Mar 1, 2005 N/A· v4 N/A· v3 10.0 HIGH· v2 Buffer overflow in the getnickuserhost function in BNC 2.8.9, and possibly other versions, allows remote IRC servers to execute arbitrary code via an IRC server response that contains many (1) ! (exclamation) or (2) @ (a...Show more Buffer overflow in the getnickuserhost function in BNC 2.8.9, and possibly other versions, allows remote IRC servers to execute arbitrary code via an IRC server response that contains many (1) ! (exclamation) or (2) @ (at sign) characters.Show less
CVE-2004-1051 5Debian MandrakesoftTodd Miller+2 more 7Debian Linux Mandrake LinuxMandrake Linux Corporate Server+4 more Apr 16, 2026 Mar 1, 2005 N/A· v4 N/A· v3 7.2 HIGH· v2 sudo before 1.6.8p2 allows local users to execute arbitrary commands by using "()" style environment variables to create functions that have the same name as any program within the bash script that is called without usin...Show more sudo before 1.6.8p2 allows local users to execute arbitrary commands by using "()" style environment variables to create functions that have the same name as any program within the bash script that is called without using the program's full pathname.Show less
CVE-2004-1027 3Arjsoftware DebianGentoo 3Debian Linux LinuxUnarj Apr 16, 2026 Mar 1, 2005 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Directory traversal vulnerability in the -x (extract) command line option in unarj allows remote attackers to overwrite arbitrary files via an arj archive with filenames that contain .. (dot dot) sequences.
CVE-2004-1001 1Debian 1Shadow Apr 16, 2026 Mar 1, 2005 N/A· v4 N/A· v3 4.6 MEDIUM· v2 Unknown vulnerability in the passwd_check function in Shadow 4.0.4.1, and possibly other versions before 4.0.5, allows local users to conduct unauthorized activities when an error from a pam_chauthtok function call is no...Show more Unknown vulnerability in the passwd_check function in Shadow 4.0.4.1, and possibly other versions before 4.0.5, allows local users to conduct unauthorized activities when an error from a pam_chauthtok function call is not properly handled.Show less
CVE-2004-0986 4Debian LinuxRedhat+1 more 4Debian Linux Fedora CoreLinux Kernel+1 more Apr 16, 2026 Mar 1, 2005 N/A· v4 N/A· v3 7.5 HIGH· v2 Iptables before 1.2.11, under certain conditions, does not properly load the required modules at system startup, which causes the firewall rules to fail to load and protect the system from remote attackers.
CVE-2005-0625 1Debian 1Reportbug Apr 16, 2026 Feb 28, 2005 N/A· v4 N/A· v3 2.1 LOW· v2 reportbug 3.2 includes settings from .reportbugrc in bug reports, which exposes sensitive information such as smtpuser and smtppasswd.
CVE-2005-0624 1Debian 1Reportbug Apr 16, 2026 Feb 28, 2005 N/A· v4 N/A· v3 2.1 LOW· v2 reportbug before 2.62 creates the .reportbugrc configuration file with world-readable permissions, which allows local users to obtain email smarthost passwords.
CVE-2005-0107 1Debian 1Bsmtpd Apr 16, 2026 Feb 25, 2005 N/A· v4 N/A· v3 7.5 HIGH· v2 bsmtpd 2.3 and earlier does not properly sanitize e-mail addresses, which allows remote attackers to execute arbitrary commands.
CVE-2004-0981 4Debian GentooImagemagick+1 more 4Debian Linux ImagemagickLinux+1 more Apr 16, 2026 Feb 9, 2005 N/A· v4 N/A· v3 10.0 HIGH· v2 Buffer overflow in the EXIF parsing routine in ImageMagick before 6.1.0 allows remote attackers to execute arbitrary code via a certain image file.
CVE-2004-0980 3Angus Mackay DebianGentoo 3Debian Linux Ez IpupdateLinux Apr 16, 2026 Feb 9, 2005 N/A· v4 N/A· v3 10.0 HIGH· v2 Format string vulnerability in ez-ipupdate.c for ez-ipupdate 3.0.10 through 3.0.11b8, when running in daemon mode with certain service types in use, allows remote servers to execute arbitrary code.

Previous 1...498499500...508 Next