Vulnerabilities > Redhat > Medium

DATE CVE VULNERABILITY TITLE RISK
2001-08-14 CVE-2001-0635 Unspecified vulnerability in Redhat Linux 7.1
Red Hat Linux 7.1 sets insecure permissions on swap files created during installation, which can allow a local attacker to gain additional privileges by reading sensitive information from the swap file, such as passwords.
local
low complexity
redhat
4.6
2001-07-19 CVE-2001-1375 tcl/tk package (tcltk) 8.3.1 searches for its libraries in the current working directory before other directories, which could allow local users to execute arbitrary code via a Trojan horse library that is under a user-controlled directory.
local
low complexity
conectiva redhat
4.6
2001-07-16 CVE-2001-0977 Denial of Service vulnerability in OpenLDAP
slapd in OpenLDAP 1.x before 1.2.12, and 2.x before 2.0.8, allows remote attackers to cause a denial of service (crash) via an invalid Basic Encoding Rules (BER) length field.
network
low complexity
mandrakesoft openldap debian redhat
5.0
2001-06-27 CVE-2001-0496 Local Security vulnerability in Linux Mandrake
kdesu in kdelibs package creates world readable temporary files containing authentication info, which can allow local users to gain privileges.
local
low complexity
mandrakesoft redhat
4.6
2001-06-02 CVE-2001-0309 Unspecified vulnerability in Redhat Linux 6.2
inetd in Red Hat 6.2 does not properly close sockets for internal services such as chargen, daytime, echo, etc., which allows remote attackers to cause a denial of service via a series of connections to the internal services.
network
low complexity
redhat
5.0
2001-03-12 CVE-2000-0315 traceroute in NetBSD 1.3.3 and Linux systems allows local unprivileged users to modify the source address of the packets, which could be used in spoofing attacks.
network
low complexity
debian digital netbsd redhat slackware
5.0
2001-03-12 CVE-2000-0314 traceroute in NetBSD 1.3.3 and Linux systems allows local users to flood other systems by providing traceroute with a large waittime (-w) option, which is not parsed properly and sets the time delay for sending packets to zero.
network
low complexity
debian digital netbsd redhat slackware
5.0
2000-10-20 CVE-2000-0031 Unspecified vulnerability in Redhat Linux 6.0/6.1
The initscripts package in Red Hat Linux allows local users to gain privileges via a symlink attack.
local
high complexity
redhat
6.2
2000-10-18 CVE-2000-1214 Buffer Overflow vulnerability in RedHat Linux ping
Buffer overflows in the (1) outpack or (2) buf variables of ping in iputils before 20001010, as distributed on Red Hat Linux 6.2 through 7J and other operating systems, may allow local users to gain privileges.
local
low complexity
immunix iputils redhat
4.6
2000-07-27 CVE-2000-0668 pam_console PAM module in Linux systems allows a user to access the system console and reboot the system when a display manager such as gdm or kdm has XDMCP enabled.
network
low complexity
michael-k-johnson conectiva redhat
5.0