Vulnerabilities > Gentoo

DATE CVE VULNERABILITY TITLE RISK
2004-08-18 CVE-2004-0432 ProFTPD 1.2.9 treats the Allow and Deny directives for CIDR based ACL entries as if they were AllowAll, which could allow FTP clients to bypass intended access restrictions.
network
low complexity
proftpd-project gentoo trustix
7.5
2004-08-18 CVE-2004-0419 XDM in XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0, which could allow remote attackers to connect to the port, in violation of the intended restrictions.
network
low complexity
x-org xfree86-project gentoo
7.5
2004-08-18 CVE-2004-0232 Multiple format string vulnerabilities in Midnight Commander (mc) before 4.6.0 may allow attackers to cause a denial of service or execute arbitrary code.
network
low complexity
midnight-commander sgi gentoo slackware
5.0
2004-08-18 CVE-2004-0231 Multiple vulnerabilities in Midnight Commander (mc) before 4.6.0, with unknown impact, related to "Insecure temporary file and directory creations."
local
low complexity
midnight-commander sgi gentoo slackware
2.1
2004-08-18 CVE-2004-0229 Unspecified vulnerability in Linux kernel Framebuffer Code
The framebuffer driver in Linux kernel 2.6.x does not properly use the fb_copy_cmap function, with unknown impact.
local
low complexity
gentoo linux
4.6
2004-08-18 CVE-2004-0226 Multiple buffer overflows in Midnight Commander (mc) before 4.6.0 may allow attackers to cause a denial of service or execute arbitrary code.
network
low complexity
midnight-commander sgi gentoo slackware
critical
10.0
2004-08-16 CVE-2004-1737 SQL Injection vulnerability in RaXnet Cacti Auth_Login.PHP
SQL injection vulnerability in auth_login.php in Cacti 0.8.5a allows remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) username or (2) password parameters.
network
low complexity
the-cacti-group gentoo
7.5
2004-08-06 CVE-2004-0649 Buffer overflow in write_packet in control.c for l2tpd may allow remote attackers to execute arbitrary code.
network
low complexity
l2tpd gentoo
critical
10.0
2004-08-06 CVE-2004-0557 Buffer Overflow vulnerability in SoX WAV File
Multiple buffer overflows in the st_wavstartread function in wav.c for Sound eXchange (SoX) 12.17.2 through 12.17.4 allow remote attackers to execute arbitrary code via certain WAV file header fields.
network
low complexity
sox conectiva gentoo redhat
critical
10.0
2004-08-06 CVE-2004-0554 Local Denial Of Service vulnerability in Linux Kernel Floating Point Exception Handler
Linux kernel 2.4.x and 2.6.x for x86 allows local users to cause a denial of service (system crash), possibly via an infinite loop that triggers a signal handler with a certain sequence of fsave and frstor instructions, as originally demonstrated using a "crash.c" program.
local
low complexity
avaya gentoo linux redhat suse conectiva
2.1