Vulnerabilities > Mandrakesoft > Mandrake Linux > Medium

DATE CVE VULNERABILITY TITLE RISK
2005-03-14 CVE-2005-0472 Remote Denial of Service vulnerability in Gaim
Gaim before 1.1.3 allows remote attackers to cause a denial of service (infinite loop) via malformed SNAC packets from (1) AIM or (2) ICQ.
network
low complexity
rob-flynn mandrakesoft redhat
5.0
2005-03-01 CVE-2004-0983 Denial Of Service vulnerability in Yukihiro Matsumoto Ruby CGI Module
The CGI module in Ruby 1.6 before 1.6.8, and 1.8 before 1.8.2, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a certain HTTP request.
network
low complexity
yukihiro-matsumoto gentoo mandrakesoft ubuntu
5.0
2005-02-21 CVE-2005-0503 uim before 0.4.5.1 trusts certain environment variables when libUIM is used in setuid or setgid applications, which allows local users to gain privileges.
local
low complexity
uim mandrakesoft
4.6
2005-01-27 CVE-2004-0886 Buffer Overflow vulnerability in LibTIFF
Multiple integer overflows in libtiff 3.6.1 and earlier allow remote attackers to cause a denial of service (crash or memory corruption) via TIFF images that lead to incorrect malloc calls.
5.0
2005-01-10 CVE-2004-1014 Remote Denial Of Service vulnerability in Linux NFS RPC.STATD
statd in nfs-utils 1.257 and earlier does not ignore the SIGPIPE signal, which allows remote attackers to cause a denial of service (server process crash) via a TCP connection that is prematurely terminated.
network
low complexity
nfs debian mandrakesoft redhat
5.0
2004-12-31 CVE-2004-2392 Multiple Unspecified vulnerability in Mandrakesoft Mandrake Linux and Mandrake Linux Corporate Server
libuser 0.51.7 allows attackers to cause a denial of service (crash or disk consumption) via unknown attack vectors, related to read failures and other bugs.
network
low complexity
mandrakesoft
5.0
2004-12-31 CVE-2004-0802 BMP Image Decoding Buffer Overflow vulnerability in IMLib/IMLib2
Buffer overflow in the BMP loader in imlib2 before 1.1.2 allows remote attackers to execute arbitrary code via a specially-crafted BMP image, a different vulnerability than CVE-2004-0817.
5.1
2004-09-13 CVE-2004-0807 Samba 3.0.6 and earlier allows remote attackers to cause a denial of service (infinite loop and memory exhaustion) via certain malformed requests that cause new processes to be spawned and enter an infinite loop.
network
low complexity
samba sgi conectiva mandrakesoft suse
5.0
2004-08-06 CVE-2004-0581 Symbolic Link vulnerability in KSymoops KSymoops-GZNM Insecure Temporary File Handling
ksymoops-gznm script in Mandrake Linux 9.1 through 10.0, and Corporate Server 2.1, allows local users to delete arbitrary files via a symlink attack on files in /tmp.
local
low complexity
gnu mandrakesoft
4.6
2004-07-07 CVE-2004-0402 Buffer Overflow vulnerability in XPCD XPCD-SVGA
Buffer overflow in xpcd-svga in xpcd before 2.08, and possibly other versions, may allow local users to execute arbitrary code.
local
low complexity
xpcd mandrakesoft
4.6