Linux

DATE	CVE	VULNERABILITY TITLE	RISK
2008-03-19	CVE-2008-0063	Use of Uninitialized Resource vulnerability in multiple products The Kerberos 4 support in KDC in MIT Kerberos 5 (krb5kdc) does not properly clear the unused portion of a buffer when generating an error message, which might allow remote attackers to obtain sensitive information, aka "Uninitialized stack values." network low complexity mit apple opensuse suse debian canonical fedoraproject CWE-908	7.5
2008-01-18	CVE-2007-6427	Out-Of-Bounds Write vulnerability in multiple products The XInput extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via requests related to byte swapping and heap corruption within multiple functions, a different vulnerability than CVE-2007-4990. network x-org canonical debian apple fedoraproject opensuse suse CWE-787 critical	9.3