Vulnerabilities > Linux

DATE CVE VULNERABILITY TITLE RISK
2002-03-08 CVE-2002-0060 Unspecified vulnerability in Linux Kernel 2.3.99/2.4.18
IRC connection tracking helper module in the netfilter subsystem for Linux 2.4.18-pre9 and earlier does not properly set the mask for conntrack expectations for incoming DCC connections, which could allow remote attackers to bypass intended firewall restrictions.
network
low complexity
linux
7.5
2002-01-31 CVE-2002-0046 Remote Security vulnerability in Linux Kernel 2.6.20.1
Linux kernel, and possibly other operating systems, allows remote attackers to read portions of memory via a series of fragmented ICMP packets that generate an ICMP TTL Exceeded response, which includes portions of the memory in the response packet.
network
low complexity
linux
5.0
2001-12-31 CVE-2001-1572 Unspecified vulnerability in Linux Kernel
The MAC module in Netfilter in Linux kernel 2.4.1 through 2.4.11, when configured to filter based on MAC addresses, allows remote attackers to bypass packet filters via small packets.
network
low complexity
linux
7.5
2001-12-31 CVE-2001-1551 Local Security vulnerability in Linux Kernel 2.2.19
Linux kernel 2.2.19 enables CAP_SYS_RESOURCE for setuid processes, which allows local users to exceed disk quota restrictions during execution of setuid programs.
local
low complexity
linux
2.1
2001-12-06 CVE-2001-0851 Linux kernel 2.0, 2.2 and 2.4 with syncookies enabled allows remote attackers to bypass firewall rules by brute force guessing the cookie.
network
low complexity
caldera linux suse
5.0
2001-11-21 CVE-2001-0914 Denial of Service vulnerability in Linux VMLinux Arbitrary Kernel Execution
Linux kernel before 2.4.11pre3 in multiple Linux distributions allows local users to cause a denial of service (crash) by starting the core vmlinux kernel, possibly related to poor error checking during ELF loading.
local
low complexity
linux suse
2.1
2001-10-18 CVE-2001-1384 Unspecified vulnerability in Linux Kernel
ptrace in Linux 2.2.x through 2.2.19, and 2.4.x through 2.4.9, allows local users to gain root privileges by running ptrace on a setuid or setgid program that itself calls an unprivileged program, such as newgrp.
local
low complexity
linux
7.2
2001-10-18 CVE-2001-0907 Denial of Service vulnerability in Linux Deep Symbolic Link
Linux kernel 2.2.1 through 2.2.19, and 2.4.1 through 2.4.10, allows local users to cause a denial of service via a series of deeply nested symlinks, which causes the kernel to spend extra time when trying to access the link.
local
low complexity
linux
2.1
2001-07-30 CVE-2001-1056 Unspecified vulnerability in Linux Kernel
IRC DCC helper in the ip_masq_irc IP masquerading module 2.2 allows remote attackers to bypass intended firewall restrictions by causing the target system to send a "DCC SEND" request to a malicious server which listens on port 6667, which may cause the module to believe that the traffic is a valid request and allow the connection to the port specified in the DCC SEND request.
network
low complexity
linux
7.5
2001-07-07 CVE-2001-1244 Denial of Service vulnerability in Multiple Vendor Small TCP MSS
Multiple TCP implementations could allow remote attackers to cause a denial of service (bandwidth and CPU exhaustion) by setting the maximum segment size (MSS) to a very small number and requesting large amounts of data, which generates more packets with less TCP-level data that amplify network traffic and consume more server CPU to process.
network
low complexity
freebsd hp linux microsoft netbsd openbsd sun
5.0