Product:

Enterprise_linux

(Redhat)
Date Id Summary Products Score Patch Annotated
2005-05-02 CVE-2005-0091 Unknown vulnerability in the Red Hat Enterprise Linux 4 kernel 4GB/4GB split patch, when using the hugemem kernel, allows local users to read and write to arbitrary kernel memory and gain privileges via certain syscalls. Enterprise_linux, Enterprise_linux_desktop N/A
2005-05-02 CVE-2005-0090 A regression error in the Red Hat Enterprise Linux 4 kernel 4GB/4GB split patch omits an "access check," which allows local users to cause a denial of service (crash). Enterprise_linux, Enterprise_linux_desktop N/A
2005-05-02 CVE-2005-0086 Heap-based buffer overflow in less in Red Hat Enterprise Linux 3 allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted file, as demonstrated using the UTF-8 locale. Enterprise_linux, Enterprise_linux_desktop N/A
2005-05-02 CVE-2005-0078 The KDE screen saver in KDE before 3.0.5 does not properly check the return value from a certain function call, which allows attackers with physical access to cause a crash and access the desktop session. Debian_linux, Kde, Enterprise_linux, Enterprise_linux_desktop, Linux_advanced_workstation N/A
2005-05-02 CVE-2005-0077 The DBI library (libdbi-perl) for Perl allows local users to overwrite arbitrary files via a symlink attack on a temporary PID file. Debian_linux, Linux, Enterprise_linux, Enterprise_linux_desktop, Ubuntu_linux N/A
2005-05-02 CVE-2005-0001 Race condition in the page fault handler (fault.c) for Linux kernel 2.2.x to 2.2.7, 2.4 to 2.4.29, and 2.6 to 2.6.10, when running on multiprocessor machines, allows local users to execute arbitrary code via concurrent threads that share the same virtual memory space and simultaneously request stack expansion. Linux_kernel, Enterprise_linux, Enterprise_linux_desktop, Secure_linux N/A
2004-10-18 CVE-2004-1613 Mozilla allows remote attackers to cause a denial of service (application crash from null dereference or infinite loop) via a web page that contains a (1) TEXTAREA, (2) INPUT, (3) FRAMESET or (4) IMG tag followed by a null character and some trailing characters, as demonstrated by mangleme. Mozilla, Enterprise_linux, Enterprise_linux_desktop, Fedora_core, Linux, Linux_advanced_workstation, Propack N/A
2005-04-14 CVE-2004-1237 Unknown vulnerability in the system call filtering code in the audit subsystem for Red Hat Enterprise Linux 3 allows local users to cause a denial of service (system crash) via unknown vectors. Linux_kernel, Enterprise_linux, Enterprise_linux_desktop, Suse_linux N/A
2005-04-14 CVE-2004-1235 Race condition in the (1) load_elf_library and (2) binfmt_aout function calls for uselib in Linux kernel 2.4 through 2.429-rc2 and 2.6 through 2.6.10 allows local users to execute arbitrary code by manipulating the VMA descriptor. Converged_communications_server, Intuity_audix, Mn100, Modular_messaging_message_storage_server, Network_routing, S8300, S8500, S8700, S8710, Linux, Linux_kernel, Mandrake_linux, Mandrake_linux_corporate_server, Mandrake_multi_network_firewall, Enterprise_linux, Enterprise_linux_desktop, Fedora_core, Linux, Suse_linux, Ubuntu_linux N/A
2005-04-14 CVE-2004-1176 Buffer underflow in extfs.c in Midnight Commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code. Debian_linux, Linux, Midnight_commander, Enterprise_linux, Linux_advanced_workstation, Suse_linux, Turbolinux_server, Turbolinux_workstation N/A