Vulnerabilities > Mandrakesoft > Mandrake Linux > 10.0

DATE CVE VULNERABILITY TITLE RISK
2004-08-06 CVE-2004-0460 Buffer Overflow vulnerability in ISC DHCPD Hostname Options Logging
Buffer overflow in the logging capability for the DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13 allows remote attackers to cause a denial of service (server crash) and possibly execute arbitrary code via multiple hostname options in (1) DISCOVER, (2) OFFER, (3) REQUEST, (4) ACK, or (5) NAK messages, which can generate a long string when writing to a log file.
network
low complexity
infoblox isc suse mandrakesoft redhat
critical
10.0
2004-07-07 CVE-2004-0402 Buffer Overflow vulnerability in XPCD XPCD-SVGA
Buffer overflow in xpcd-svga in xpcd before 2.08, and possibly other versions, may allow local users to execute arbitrary code.
local
low complexity
xpcd mandrakesoft
4.6
2004-05-04 CVE-2004-0386 Remote HTTP Header Buffer Overflow vulnerability in MPlayer
Buffer overflow in the HTTP parser for MPlayer 1.0pre3 and earlier, 0.90, and 0.91 allows remote attackers to execute arbitrary code via a long Location header.
network
low complexity
mplayer gentoo mandrakesoft
critical
10.0
2004-02-16 CVE-2004-1180 Unknown vulnerability in the rwho daemon (rwhod) before 0.17, on little endian architectures, allows remote attackers to cause a denial of service (application crash).
network
low complexity
sun debian mandrakesoft
5.0
1996-07-16 CVE-1999-1572 cpio on FreeBSD 2.1.0, Debian GNU/Linux 3.0, and possibly other operating systems, uses a 0 umask when creating files using the -O (archive) or -F options, which creates the files with mode 0666 and allows local users to read or overwrite those files.
local
low complexity
debian freebsd mandrakesoft redhat ubuntu
2.1