Vulnerabilities > Suse > High

DATE CVE VULNERABILITY TITLE RISK
2004-10-20 CVE-2004-0746 Konqueror in KDE 3.2.3 and earlier allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk and .firm.in, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session.
network
low complexity
kde gentoo mandrakesoft suse
7.5
2004-10-20 CVE-2004-0688 Remote Buffer Overflow vulnerability in libXpm Image Decoding
Multiple integer overflows in (1) the xpmParseColors function in parse.c, (2) XpmCreateImageFromXpmImage, (3) CreateXImage, (4) ParsePixels, and (5) ParseAndPutPixels for libXpm before 6.8.1 may allow remote attackers to execute arbitrary code via a malformed XPM image file.
network
low complexity
x-org xfree86-project openbsd suse
7.5
2004-10-07 CVE-2005-0373 Remote And Local vulnerability in Cyrus SASL
Buffer overflow in digestmd5.c CVS release 1.170 (also referred to as digestmda5.c), as used in the DIGEST-MD5 SASL plugin for Cyrus-SASL but not in any official releases, allows remote attackers to execute arbitrary code.
network
low complexity
cyrus openpkg suse conectiva apple redhat
7.5
2004-09-16 CVE-2004-0866 Internet Explorer 6.0 allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk, and .sch.uk, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session.
network
low complexity
kde mozilla microsoft suse
7.5
2004-09-16 CVE-2004-0827 Multiple buffer overflows in the ImageMagick graphics library 5.x before 5.4.4, and 6.x before 6.0.6.2, allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via malformed (1) AVI, (2) BMP, or (3) DIB files. 7.5
2004-08-06 CVE-2004-0495 Device Driver vulnerability in Linux Kernel
Multiple unknown vulnerabilities in Linux kernel 2.4 and 2.6 allow local users to gain privileges or access kernel memory, as found by the Sparse source code checking tool.
local
low complexity
avaya gentoo linux redhat suse conectiva
7.2
2002-12-31 CVE-2002-2259 Buffer Errors vulnerability in Gnuplot 3.7
Buffer overflow in the French documentation patch for Gnuplot 3.7 in SuSE Linux before 8.0 allows local users to execute arbitrary code as root via unknown attack vectors.
local
low complexity
suse gnuplot CWE-119
7.2
2002-11-29 CVE-2002-1285 Local Privilege Escalation vulnerability in LPRNG runlpr
runlpr in the LPRng package allows the local lp user to gain root privileges via certain command line arguments.
local
low complexity
suse
7.2
2002-09-05 CVE-2002-0854 Local Security vulnerability in Linux 7.3/8.0
Buffer overflows in ISDN Point to Point Protocol (PPP) daemon (ipppd) in the i4l package on SuSE 7.3, 8.0, and possibly other operating systems, may allow local users to gain privileges.
local
low complexity
suse
7.2
2002-08-12 CVE-2002-0768 Remote Security vulnerability in Linux
Buffer overflow in lukemftp FTP client in SuSE 6.4 through 8.0, and possibly other operating systems, allows a malicious FTP server to execute arbitrary code via a long PASV command.
network
low complexity
luke-mewburn suse
7.5