Vulnerabilities > Linux > Linux Kernel

DATE CVE VULNERABILITY TITLE RISK
2004-03-03 CVE-2002-1574 Unspecified vulnerability in Linux Kernel
Buffer overflow in the ixj telephony card driver in Linux before 2.4.20 has unknown impact and attack vectors.
local
low complexity
linux
4.6
2004-02-19 CVE-2004-2136 Local Security vulnerability in Linux Kernel 2.6.0
dm-crypt on Linux kernel 2.6.x, when used on certain file systems with a block size 1024 or greater, has certain "IV computation" weaknesses that allow watermarked files to be detected without decryption.
local
low complexity
linux
2.1
2004-02-17 CVE-2004-0058 Local Security vulnerability in AntiVir
Antivir / Linux 2.0.9-9, and possibly earlier versions, allows local users to overwrite arbitrary files via a symlink attack on the .pid_antivir_$$ temporary file.
local
low complexity
linux
2.1
2004-02-17 CVE-2004-0001 Unspecified vulnerability in Linux Kernel 2.6.20.1
Unknown vulnerability in the eflags checking in the 32-bit ptrace emulation for the Linux kernel on AMD64 systems allows local users to gain privileges.
local
low complexity
linux
7.2
2004-01-20 CVE-2003-0985 Unspecified vulnerability in Linux Kernel
The mremap system call (do_mremap) in Linux kernel 2.4.x before 2.4.21, and possibly other versions before 2.4.24, does not properly perform bounds checks, which allows local users to cause a denial of service and possibly gain privileges by causing a remapping of a virtual memory area (VMA) to create a zero length VMA, a different vulnerability than CAN-2004-0077.
local
low complexity
linux
7.2
2004-01-05 CVE-2003-0984 Unspecified vulnerability in Linux Kernel
Real time clock (RTC) routines in Linux kernel 2.4.23 and earlier do not properly initialize their structures, which could leak kernel data to user space.
local
low complexity
linux
4.6
2003-12-31 CVE-2003-1467 Cross-Site Scripting vulnerability in Phorum
Multiple cross-site scripting (XSS) vulnerabilities in (1) login.php, (2) register.php, (3) post.php, and (4) common.php in Phorum before 3.4.3 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors.
4.3
2003-12-31 CVE-2003-1454 Unspecified vulnerability in Invision Power Services Invision Board 1.0/1.0.1/1.1.1
Invision Power Services Invision Board 1.0 through 1.1.1, when a forum is password protected, stores the administrator password in a cookie in plaintext, which could allow remote attackers to gain access.
network
low complexity
linux microsoft unix invision-power-services
5.0
2003-12-31 CVE-2003-1430 Path Traversal vulnerability in Epic Games Unreal Engine 226F/433/436
Directory traversal vulnerability in Unreal Tournament Server 436 and earlier allows remote attackers to access known files via a ".." (dot dot) in an unreal:// URL.
network
low complexity
linux microsoft epic-games CWE-22
5.0
2003-12-31 CVE-2003-1428 Unspecified vulnerability in Bharat Mediratta Gallery 1.3.3
Gallery 1.3.3 creates directories with insecure permissions, which allows local users to read, modify, or delete photos.
low complexity
linux bharat-mediratta
4.8