Skip to content
Noroxi

trustix records

67 published records for vendor trustix.

Researcher profile

Entered KEV
0 · 0%
Weaponized
1 · 1.5%
Pre-auth RCE
18
With a fix record
74.6%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    67 records
    • CVE-2000-0917
      64This week

      Format string vulnerability in use_syslog() function in LPRng 3.6.24 allows remote attackers to execute arbitrary commands.

      CriticalCVSS 10.0WeaponizedEPSS 78%

      caldera · openlinux ebuilderDec 19, 2000

    • CVE-2004-0493
      50Plan

      The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service (memory exhaustion), and p

      MediumCVSS 6.4Proof of conceptEPSS 84%

      apache · http serverAug 6, 2004

    • CVE-2004-0600
      49Plan

      Buffer overflow in the Samba Web Administration Tool (SWAT) in Samba 3.0.2 to 3.0.4 allows remote attackers to execute arbitrary code via an

      CriticalCVSS 10.0Proof of conceptEPSS 29%

      samba · sambaJul 27, 2004

    • CVE-2004-0990
      48Plan

      Integer overflow in GD Graphics Library libgd 2.0.28 (libgd2), and possibly other versions, allows remote attackers to cause a denial of ser

      CriticalCVSS 10.0Proof of conceptEPSS 28%

      gd graphics library · gdlibMar 1, 2005

    • CVE-2000-0666
      48Plan

      rpc.statd in the nfs-utils package in various Linux distributions does not properly cleanse untrusted format strings, which allows remote at

      CriticalCVSS 10.0Proof of conceptEPSS 26%

      conectiva · linuxJul 16, 2000

    • CVE-2004-0989
      47Plan

      Multiple buffer overflows in libXML 2.6.12 and 2.6.13 (libxml2), and possibly other versions, may allow remote attackers to execute arbitrar

      CriticalCVSS 10.0Proof of conceptEPSS 21%

      xmlsoft · libxmlMar 1, 2005

    • CVE-2000-0844
      45Plan

      Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attacke

      CriticalCVSS 10.0Proof of conceptEPSS 15%

      caldera · openlinux ebuilderNov 14, 2000

    • CVE-2004-1154
      44Plan

      Integer overflow in the Samba daemon (smbd) in Samba 2.x and 3.0.x through 3.0.9 allows remote authenticated users to cause a denial of serv

      CriticalCVSS 10.0No exploitEPSS 13%

      samba · sambaJan 10, 2005

    • CVE-2002-0083
      43Plan

      Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious servers to gain privileges.

      CriticalCVSS 9.8Proof of conceptEPSS 14%

      immunix · immunixMar 15, 2002

    • CVE-2004-1304
      43Plan

      Stack-based buffer overflow in the ELF header parsing code in file before 4.12 allows attackers to execute arbitrary code via a crafted ELF

      CriticalCVSS 10.0Proof of conceptEPSS 11%

      file · fileJan 10, 2005

    • CVE-2004-0941
      43Plan

      Multiple buffer overflows in the gd graphics library (libgd) 2.0.21 and earlier may allow remote attackers to execute arbitrary code via mal

      CriticalCVSS 10.0No exploitEPSS 10%

      gd graphics library · gdlibFeb 9, 2005

    • CVE-2004-1065
      43Plan

      Buffer overflow in the exif_read_data function in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to execute arbitrary cod

      CriticalCVSS 10.0No exploitEPSS 10%

      php · phpJan 10, 2005

    • CVE-2004-1019
      42Plan

      The deserialization code in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to cause a denial of service and execute arbit

      CriticalCVSS 10.0No exploitEPSS 7%

      php · phpJan 10, 2005

    • CVE-2004-1012
      42Plan

      The argument parser of the PARTIAL command in Cyrus IMAP Server 2.2.6 and earlier allows remote authenticated users to execute arbitrary cod

      CriticalCVSS 10.0No exploitEPSS 5%

      carnegie mellon university · cyrus imap serverJan 10, 2005

    • CVE-2004-1011
      42Plan

      Stack-based buffer overflow in Cyrus IMAP Server 2.2.4 through 2.2.8, with the imapmagicplus option enabled, allows remote attackers to exec

      CriticalCVSS 10.0No exploitEPSS 5%

      carnegie mellon university · cyrus imap serverJan 10, 2005

    • CVE-2004-1013
      42Plan

      The argument parser of the FETCH command in Cyrus IMAP Server 2.2.x through 2.2.8 allows remote authenticated users to execute arbitrary cod

      CriticalCVSS 10.0No exploitEPSS 5%

      carnegie mellon university · cyrus imap serverJan 10, 2005

    • CVE-2004-0595
      41Plan

      The strip_tags function in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, does not filter null (\0) characters within tag names when restricti

      MediumCVSS 6.8Proof of conceptEPSS 45%

      php · phpJul 27, 2004

    • CVE-2005-3625
      41Plan

      Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial

      CriticalCVSS 10.0No exploitEPSS 3%

      libextractor · libextractorDec 31, 2005

    • CVE-2007-0910
      41Plan

      Unspecified vulnerability in PHP before 5.2.1 allows attackers to "clobber" certain super-global variables via unspecified vectors.

      CriticalCVSS 10.0No exploitEPSS 3%

      php · phpFeb 13, 2007

    • CVE-2004-0594
      36Monitor

      The memory_limit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain conditions such as when register_globals is ena

      MediumCVSS 5.1Proof of conceptEPSS 54%

      hp · hp-uxJul 27, 2004

    • CVE-2004-2044
      33Monitor

      PHP-Nuke 7.3, and other products that use the PHP-Nuke codebase such as the Nuke Cops betaNC PHP-Nuke Bundle, OSCNukeLite 3.1, and OSC2Nuke

      HighCVSS 7.5Proof of conceptEPSS 11%

      francisco burzi · php-nukeJun 1, 2004

    • CVE-2004-0432
      33Monitor

      ProFTPD 1.2.9 treats the Allow and Deny directives for CIDR based ACL entries as if they were AllowAll, which could allow FTP clients to byp

      HighCVSS 7.5No exploitEPSS 9%

      proftpd project · proftpdAug 18, 2004

    • CVE-2004-0803
      32Monitor

      Multiple vulnerabilities in the RLE (run length encoding) decoders for libtiff 3.6.1 and earlier, related to buffer overflows and integer ov

      HighCVSS 7.5No exploitEPSS 8%

      libtiff · libtiffDec 23, 2004

    • CVE-2007-0906
      32Monitor

      Multiple buffer overflows in PHP before 5.2.1 allow attackers to cause a denial of service and possibly execute arbitrary code via unspecifi

      HighCVSS 7.5No exploitEPSS 5%

      php · phpFeb 13, 2007

    • CVE-2004-0940
      32Monitor

      Buffer overflow in the get_tag function in mod_include for Apache 1.3.x to 1.3.32 allows local users who can create SSI documents to execute

      HighCVSS 7.8Proof of conceptEPSS 4%

      apache · http serverFeb 9, 2005