Vulnerabilities > Mandrakesoft > Mandrake Linux Corporate Server > 2.1

DATE CVE VULNERABILITY TITLE RISK
2005-01-10 CVE-2004-1098 Multiple Unspecified vulnerability in Roaring Penguin Software MIMEDefang
MIMEDefang in MIME-tools 5.414 allows remote attackers to bypass virus scanning capabilities via an e-mail attachment with a virus that contains an empty boundary string in the Content-Type header.
network
low complexity
roaring-penguin mandrakesoft suse
7.5
2005-01-10 CVE-2004-1014 Remote Denial Of Service vulnerability in Linux NFS RPC.STATD
statd in nfs-utils 1.257 and earlier does not ignore the SIGPIPE signal, which allows remote attackers to cause a denial of service (server process crash) via a TCP connection that is prematurely terminated.
network
low complexity
nfs debian mandrakesoft redhat
5.0
2004-12-31 CVE-2004-2396 passwd 0.68 does not check the return code for the pam_start function, which has unknown impact and attack vectors that may prevent "safe and proper operation" of PAM.
local
low complexity
mandrakesoft
7.2
2004-12-31 CVE-2004-2395 Unspecified vulnerability in Mandrakesoft products
Memory leak in passwd 0.68 allows local users to cause a denial of service (memory consumption) via a large number of failed read attempts from the password buffer.
local
low complexity
mandrakesoft
2.1
2004-12-31 CVE-2004-2394 Unspecified vulnerability in Mandrakesoft products
Off-by-one error in passwd 0.68 and earlier, when using the --stdin option, causes passwd to use the first 78 characters of a password instead of the first 79, which results in a small reduction of the search space required for brute force attacks.
local
low complexity
mandrakesoft
2.1
2004-12-31 CVE-2004-2392 Multiple Unspecified vulnerability in Mandrakesoft Mandrake Linux and Mandrake Linux Corporate Server
libuser 0.51.7 allows attackers to cause a denial of service (crash or disk consumption) via unknown attack vectors, related to read failures and other bugs.
network
low complexity
mandrakesoft
5.0
2004-12-31 CVE-2004-0817 BMP Image Decoding Buffer Overflow vulnerability in IMLib/IMLib2
Multiple heap-based buffer overflows in the imlib BMP image handler allow remote attackers to execute arbitrary code via a crafted BMP file.
7.5
2004-12-31 CVE-2004-0802 BMP Image Decoding Buffer Overflow vulnerability in IMLib/IMLib2
Buffer overflow in the BMP loader in imlib2 before 1.1.2 allows remote attackers to execute arbitrary code via a specially-crafted BMP image, a different vulnerability than CVE-2004-0817.
5.1
2004-12-23 CVE-2004-0805 Remote Stereo Boundary Buffer Overflow vulnerability in MPG123
Buffer overflow in layer2.c in mpg123 0.59r and possibly mpg123 0.59s allows remote attackers to execute arbitrary code via a certain (1) mp3 or (2) mp2 file.
network
low complexity
mpg123 mandrakesoft
7.5
2004-12-06 CVE-2004-0565 Floating point information leak in the context switch code for Linux 2.4.x only checks the MFH bit but does not verify the FPH owner, which allows local users to read register values of other processes by setting the MFH bit.
local
low complexity
mandrakesoft gentoo linux trustix
2.1