Vulnerabilities > Ubuntu > Ubuntu Linux > 6.06.lts

DATE CVE VULNERABILITY TITLE RISK
2008-01-17 CVE-2008-0172 Improper Input Validation vulnerability in Boost 1.33/1.34
The get_repeat_type function in basic_regex_creator.hpp in the Boost regex library (aka Boost.Regex) in Boost 1.33 and 1.34 allows context-dependent attackers to cause a denial of service (NULL dereference and crash) via an invalid regular expression.
network
low complexity
ubuntu boost CWE-20
5.0
2007-05-13 CVE-2007-2637 Remote Security vulnerability in MoinMoin
MoinMoin before 20070507 does not properly enforce ACLs for calendars and includes, which allows remote attackers to read certain pages via unspecified vectors.
network
low complexity
ubuntu moinmoin
5.0
2007-04-06 CVE-2007-1352 Local Integer Overflow vulnerability in X.Org LibXFont
Integer overflow in the FontFileInitTable function in X.Org libXfont before 20070403 allows remote authenticated users to execute arbitrary code via a long first line in the fonts.dir file, which results in a heap overflow.
3.8
2007-04-06 CVE-2007-1351 Numeric Errors vulnerability in multiple products
Integer overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont before 20070403 and (2) freetype 2.3.2 and earlier allows remote authenticated users to execute arbitrary code via crafted BDF fonts, which result in a heap overflow.
8.5
2007-03-21 CVE-2007-1463 Unspecified vulnerability in Inkscape
Format string vulnerability in Inkscape before 0.45.1 allows user-assisted remote attackers to execute arbitrary code via format string specifiers in a URI, which is not properly handled by certain dialogs.
network
ubuntu inkscape
6.8
2006-12-14 CVE-2006-5649 Multiple vulnerability in Linux Kernel
Unspecified vulnerability in the "alignment check exception handling" in Ubuntu 5.10, 6.06 LTS, and 6.10 for the PowerPC (PPC) allows local users to cause a denial of service (kernel panic) via unspecified vectors.
local
low complexity
ubuntu
4.6
2006-11-06 CVE-2006-5466 Heap-based buffer overflow in the showQueryPackage function in librpm in RPM Package Manager 4.4.8, when the LANG environment variable is set to ru_RU.UTF-8, might allow user-assisted attackers to execute arbitrary code via crafted RPM packages.
network
high complexity
rpm ubuntu
5.4
2006-07-18 CVE-2006-3597 Local Security vulnerability in Ubuntu Linux 6.06Lts
passwd before 1:4.0.13 on Ubuntu 6.06 LTS leaves the root password blank instead of locking it when the administrator selects the "Go Back" option after the final "Installation complete" message and uses the main menu, which causes the password to be zeroed out in the installer's memory.
local
low complexity
ubuntu
7.2
2006-07-06 CVE-2006-3378 Privilege Escalation vulnerability in Ubuntu Linux 5.04/5.10/6.06Lts
passwd command in shadow in Ubuntu 5.04 through 6.06 LTS, when called with the -f, -g, or -s flag, does not check the return code of a setuid call, which might allow local users to gain root privileges if setuid fails in cases such as PAM failures or resource limits.
local
low complexity
ubuntu
7.2