Vulnerabilities > Mandrakesoft
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2002-01-31 | CVE-2002-0002 | Format string vulnerability in stunnel before 3.22 when used in client mode for (1) smtp, (2) pop, or (3) nntp allows remote malicious servers to execute arbitrary code. | 7.5 |
| 2001-12-12 | CVE-2001-1190 | Unspecified vulnerability in Mandrakesoft Mandrake Linux 8.1 The default PAM files included with passwd in Mandrake Linux 8.1 do not support MD5 passwords, which could result in a lower level of password security than intended. | 4.6 |
| 2001-11-30 | CVE-2001-0912 | Local Security vulnerability in Mandrakesoft Mandrake Linux 8.1 Packaging error for expect 8.3.3 in Mandrake Linux 8.1 causes expect to search for its libraries in the /home/snailtalk directory before other directories, which could allow a local user to gain root privileges. | 7.2 |
| 2001-11-28 | CVE-2001-1449 | Remote Security vulnerability in Apache The default installation of Apache before 1.3.19 on Mandrake Linux 7.1 through 8.0 and Linux Corporate Server 1.0.1 allows remote attackers to list the directory index of arbitrary web directories. | 7.5 |
| 2001-10-18 | CVE-2001-0736 | Local Security vulnerability in Linux Mandrake Vulnerability in (1) pine before 4.33 and (2) the pico editor, included with pine, allows local users local users to overwrite arbitrary files via a symlink attack. | 2.1 |
| 2001-07-18 | CVE-2001-1030 | Squid before 2.3STABLE5 in HTTP accelerator mode does not enable access control lists (ACLs) when the httpd_accel_host and http_accel_with_proxy off settings are used, which allows attackers to bypass the ACLs and conduct unauthorized activities such as port scanning. | 7.5 |
| 2001-07-16 | CVE-2001-0977 | Denial of Service vulnerability in OpenLDAP slapd in OpenLDAP 1.x before 1.2.12, and 2.x before 2.0.8, allows remote attackers to cause a denial of service (crash) via an invalid Basic Encoding Rules (BER) length field. | 5.0 |
| 2001-07-02 | CVE-2001-0440 | Buffer overflow in logging functions of licq before 1.0.3 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands. | 7.5 |
| 2001-07-02 | CVE-2001-0439 | licq before 1.0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in a URL. | 7.5 |
| 2001-06-27 | CVE-2001-0496 | Local Security vulnerability in Linux Mandrake kdesu in kdelibs package creates world readable temporary files containing authentication info, which can allow local users to gain privileges. | 4.6 |