Linux vulnerabilities
Showing 12151 - 12160 of 12.2K CVEs
- CVE-1999-1225 Published Aug 24, 1997
rpc.mountd on Linux, Ultrix, and possibly other operating systems, allows remote attackers to determine the existence of a file on the server by attempting to mount that file, which generates different error messages depending on whether the file exists or not.
- CVE-1999-0524 Published Aug 1, 1997
ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts.
- CVE-1999-0628 Published Jul 1, 1997
The rwho/rwhod service is running, which exposes machine status and user information.
- CVE-1999-0195 Published Jul 1, 1997
Denial of service in RPC portmapper allows attackers to register or unregister RPC services or spoof RPC services using a spoofed source IP address such as 127.0.0.1.
- CVE-1999-0074 Published Jul 1, 1997
Listening TCP ports are sequentially allocated, allowing spoofing attacks.
- CVE-1999-0165 Published Mar 1, 1997
NFS cache poisoning.
- CVE-1999-0171 Published Jan 1, 1997
Denial of service in syslog by sending it a large number of superfluous messages.
- CVE-1999-0128 Published Dec 18, 1996
Oversized ICMP ping packets can result in a denial of service, aka Ping o' Death.
- CVE-1999-0138 Published Jun 26, 1996
The suidperl and sperl program do not give up root privileges when changing UIDs back to the original users, allowing root access.
- CVE-1999-0245 Published Sep 7, 1995
Some configurations of NIS+ in Linux allowed attackers to log in as the user "+".
rpc.mountd on Linux, Ultrix, and possibly other operating systems, allows remote attackers to determine the existence of a file on the server by attempting to mount that file, which generates different error messages depending on whether the file exists or not.
ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts.
medium 4.0
The rwho/rwhod service is running, which exposes machine status and user information.
Denial of service in RPC portmapper allows attackers to register or unregister RPC services or spoof RPC services using a spoofed source IP address such as 127.0.0.1.
Listening TCP ports are sequentially allocated, allowing spoofing attacks.
NFS cache poisoning.
Denial of service in syslog by sending it a large number of superfluous messages.
Oversized ICMP ping packets can result in a denial of service, aka Ping o' Death.
The suidperl and sperl program do not give up root privileges when changing UIDs back to the original users, allowing root access.
Some configurations of NIS+ in Linux allowed attackers to log in as the user "+".