Vulnerabilities > Suse > Suse Linux > 9.3

DATE CVE VULNERABILITY TITLE RISK
2007-05-14 CVE-2007-2654 Race Condition vulnerability in multiple products
xfs_fsr in xfsdump creates a .fsr temporary directory with insecure permissions, which allows local users to read or overwrite arbitrary files on xfs filesystems.
4.4
2007-01-24 CVE-2007-0460 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Suse Linux
Multiple buffer overflows in ulogd for SUSE Linux 9.3 up to 10.1, and possibly other distributions, have unknown impact and attack vectors related to "improper string length calculations."
network
low complexity
suse CWE-119
critical
10.0
2006-10-31 CVE-2006-5616 Local and Remote vulnerability in OpenPBS
Multiple unspecified vulnerabilities in OpenPBS, as used in SUSE Linux 9.2 through 10.1, allow attackers to execute arbitrary code via unspecified vectors.
network
low complexity
openpbs suse
critical
10.0
2006-09-12 CVE-2006-2658 Directory Traversal vulnerability in Mono XSP
Directory traversal vulnerability in the xsp component in mod_mono in Mono/C# web server, as used in SUSE Open-Enterprise-Server 1 and SUSE Linux 9.2 through 10.0, allows remote attackers to read arbitrary files via a ..
network
low complexity
mono suse
5.0
2006-02-23 CVE-2006-0803 The signature verification functionality in the YaST Online Update (YOU) script handling relies on a gpg feature that is not intended for signature verification, which prevents YOU from detecting malicious scripts or code that do not pass the signature check when gpg 1.4.x is being used.
network
low complexity
novell suse
5.0
2006-02-11 CVE-2006-0646 Unspecified vulnerability in Suse Linux
ld in SUSE Linux 9.1 through 10.0, and SLES 9, in certain circumstances when linking binaries, can leave an empty RPATH or RUNPATH, which allows local attackers to execute arbitrary code as other users via by running an ld-linked application from the current directory, which could contain an attacker-controlled library file.
local
suse
4.4
2006-01-31 CVE-2006-0043 Remote Buffer Overflow vulnerability in NFS-SERVER
Buffer overflow in the realpath function in nfs-server rpc.mountd, as used in SUSE Linux 9.1 through 10.0, allows local users to execute arbitrary code via unspecified vectors involving mount requests and symlinks.
local
low complexity
suse
4.6
2005-12-31 CVE-2005-4790 Local Privilege Escalation vulnerability in Tomboy LD_LIBRARY_PATH Environment Variable
Multiple untrusted search path vulnerabilities in SUSE Linux 9.3 and 10.0, and possibly other distributions, cause the working directory to be added to LD_LIBRARY_PATH, which might allow local users to execute arbitrary code via (1) beagle, (2) tomboy, or (3) blam.
local
novell suse
6.9
2005-12-31 CVE-2005-4789 Unspecified vulnerability in Suse Linux 9.2/9.3
resmgr in SUSE Linux 9.2 and 9.3, and possibly other distributions, does not properly enforce class-specific exclude rules in some situations, which allows local users to bypass intended access restrictions for USB devices that set their class ID at the interface level.
local
low complexity
suse
2.1
2005-12-31 CVE-2005-4788 Unspecified vulnerability in Suse Linux 9.2/9.3
resmgr in SUSE Linux 9.2 and 9.3, and possibly other distributions, allows local users to bypass access control rules for USB devices via "alternate syntax for specifying USB devices."
local
low complexity
suse
2.1