Vulnerabilities > Slackware > Slackware Linux > 8.1

DATE CVE VULNERABILITY TITLE RISK
2007-12-01 CVE-2007-6200 Permissions, Privileges, and Access Controls vulnerability in Rsync
Unspecified vulnerability in rsync before 3.0.0pre6, when running a writable rsync daemon, allows remote attackers to bypass exclude, exclude_from, and filter and read or write hidden files via (1) symlink, (2) partial-dir, (3) backup-dir, and unspecified (4) dest options.
network
low complexity
slackware rsync CWE-264
critical
10.0
2007-12-01 CVE-2007-6199 Configuration vulnerability in Rsync
rsync before 3.0.0pre6, when running a writable rsync daemon that is not using chroot, allows remote attackers to access restricted files via unknown vectors that cause rsync to create a symlink that points outside of the module's hierarchy.
network
slackware rsync CWE-16
critical
9.3
2005-02-09 CVE-2004-0940 Incorrect Calculation of Buffer Size vulnerability in multiple products
Buffer overflow in the get_tag function in mod_include for Apache 1.3.x to 1.3.32 allows local users who can create SSI documents to execute arbitrary code as the apache user via SSI (XSSI) documents that trigger a length calculation error.
local
low complexity
openpkg apache slackware hp suse trustix CWE-131
7.8
2004-08-06 CVE-2004-0530 The PHP package in Slackware 8.1, 9.0, and 9.1, when linked against a static library, includes /tmp in the search path, which allows local users to execute arbitrary code as the PHP user by inserting shared libraries into the appropriate path.
local
low complexity
slackware
7.2
2004-01-05 CVE-2003-0977 CVS server before 1.11.10 may allow attackers to cause the CVS server to create directories and files in the file system root directory via malformed module requests.
network
low complexity
cvs slackware
7.5
2003-12-15 CVE-2003-0962 Remote Heap Overflow vulnerability in RSync Daemon Mode Undisclosed
Heap-based buffer overflow in rsync before 2.5.7, when running in server mode, allows remote attackers to execute arbitrary code and possibly escape the chroot jail.
network
low complexity
andrew-tridgell redhat engardelinux slackware
7.5
2003-06-16 CVE-2003-0195 Denial Of Service vulnerability in Slackware Linux 8.1/9.0
CUPS before 1.1.19 allows remote attackers to cause a denial of service via a partial printing request to the IPP port (631), which does not time out.
network
low complexity
slackware
5.0