Lucene search
+L
EngardelinuxSecure Linux

7 matches found

CVE
CVE
added 2002/06/25 4:00 a.m.297 views

CVE-2002-0083

CVE-2002-0083 is described in the initial document as an off-by-one error in the OpenSSH channel code affecting OpenSSH 2.0–3.0.2 that can allow privilege escalation. The connected F5 advisory (K1648) references CAN-2002-0083 and labels it as an OpenSSH array overflow vulnerability, but does not ...

10CVSS9.1AI score0.14688EPSS
Save
CVE
CVE
added 2004/06/08 4:00 a.m.106 views

CVE-2004-0535

CVE-2004-0535 relates to the Linux kernel's e1000 NIC driver (2.4.x and earlier) where memory used by the driver was not properly initialized before access. This could permit a local attacker to read portions of kernel memory. The issue is documented and linked to several vendor advisories (e.g.,...

2.1CVSS5.7AI score0.0047EPSS
Save
CVE
CVE
added 2003/12/10 5:00 a.m.92 views

CVE-2003-0962

CVE-2003-0962 is a heap-based/buffer overflow in rsync versions prior to 2.5.7 when run in server mode. The vulnerability could allow a remote attacker to execute arbitrary code on the rsync server, potentially while in a chroot jail. The issue affects servers listening on port 873. Advisories fr...

7.5CVSS7.8AI score0.21157EPSS
Save
CVE
CVE
added 2001/10/12 4:00 a.m.76 views

CVE-2001-0736

This CVE (CVE-2001-0736) affects the Pine email client (and pico editor) prior to version 4.33, where a local user can overwrite arbitrary files via a symlink attack. The vulnerability allows any local user to overwrite files owned by other users, including root, under certain conditions. A fix i...

2.1CVSS6.4AI score0.00815EPSS
Save
CVE
CVE
added 2002/06/25 4:00 a.m.73 views

CVE-2002-0002

The connected advisory confirms a format-string vulnerability in stunnel for client-mode negotiations (smtp, pop, nntp). Affected versions: 3.15 through 3.21c; 3.22 is not vulnerable. The flaw arises in the functions that implement client-side SMTP/POP/NNTP negotiations, allowing a malicious serv...

7.5CVSS7.4AI score0.05283EPSS
Save
CVE
CVE
added 2002/06/25 4:00 a.m.54 views

CVE-2001-1240

The CVE-2001-1240 entry concerns Engarde Secure Linux 1.0.1 where the default sudo configuration allows any user in the admin group to execute certain commands that could yield full root access. The documents confirm the affected component is the sudo configuration on Engarde Secure Linux 1.0.1 a...

10CVSS7.3AI score0.0184EPSS
Save
CVE
CVE
added 2002/03/09 5:00 a.m.53 views

CVE-2001-0739

The CVE-2001-0739 entry affects Guardian Digital WebTool in EnGarde Secure Linux 1.0.1. Affected component: WebTool; root cause: restarted services can inherit certain environmental variables, enabling local users to gain root privileges. Impact: local privilege escalation. No explicit remediatio...

7.2CVSS6.9AI score0.00393EPSS
Save