Записи mandrakesoft
151 опубликованных записей вендора mandrakesoft.
Профиль для исследователя
- Попали в KEV
- 0 · 0 %
- С эксплойтом
- 0 · 0 %
- Pre-auth RCE
- 30
- С записью об исправлении
- 42,4 %
- Медиана: публикация → KEV
- Ни одна запись не попала в KEV
Записи по годам
Столбик: всего · тёмная часть: CISA KEV.
Повторяющиеся классы
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer4
- CWE-399 Resource Management Errors3
- CWE-189 Numeric Errors2
- CWE-20 Improper Input Validation2
- CWE-276 Incorrect Default Permissions1
- CWE-401 Missing Release of Memory after Effective Lifetime1
Классы уязвимостей, которые чаще всего встречаются у этого вендора: куда смотреть.
CWEВсе записи
151 записей| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
54В плане | CVE-2004-0460Эксплойта нет | Buffer overflow in the logging capability for the DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13 allows remote attackers to cause isc · dhcpd | Критическая10,0 | — | 45,3 % | 6 авг. 2004 г. |
49В плане | CVE-2004-0932Proof of concept | McAfee Anti-Virus Engine DATS drivers before 4398 released on Oct 13th 2004 and DATS Driver before 4397 October 6th 2004 allows remote attacca · etrust antivirus | Высокая7,5 | — | 63,6 % | 27 янв. 2005 г. |
48В плане | CVE-2004-0386Proof of concept | Buffer overflow in the HTTP parser for MPlayer 1.0pre3 and earlier, 0.90, and 0.91 allows remote attackers to execute arbitrary code via a lmplayer · mplayer | Критическая10,0 | — | 26,9 % | 4 мая 2004 г. |
45В плане | CVE-2004-0461Эксплойта нет | The DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13, when compiled in environments that do not provide the vsnprintf function, usesisc · dhcpd | Критическая10,0 | — | 16,7 % | 6 авг. 2004 г. |
45В плане | CVE-2000-0844Proof of concept | Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackecaldera · openlinux ebuilder · CWE-264 | Критическая10,0 | — | 15,6 % | 14 нояб. 2000 г. |
43В плане | CVE-2002-0083Proof of concept | Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious servers to gain privileges.immunix · immunix · CWE-193 | Критическая9,8 | — | 14,6 % | 15 мар. 2002 г. |
42В плане | CVE-2003-0434Proof of concept | Various PDF viewers including (1) Adobe Acrobat 5.06 and (2) Xpdf 1.01 allow remote attackers to execute arbitrary commands via shell metachadobe · acrobat | Высокая7,5 | — | 40,9 % | 24 июл. 2003 г. |
42В плане | CVE-2007-1543Эксплойта нет | Stack-based buffer overflow in the accept_att_local function in server/os/connection.c in Network Audio System (NAS) before 1.8a SVN 237 allmandrakesoft · mandrake linux | Критическая10,0 | — | 8,0 % | 20 мар. 2007 г. |
42В плане | CVE-2004-1187Эксплойта нет | Heap-based buffer overflow in the pnm_get_chunk function for xine 0.99.2, and other packages such as MPlayer that use the same code, allows mplayer · mplayer | Критическая10,0 | — | 5,1 % | 10 янв. 2005 г. |
41В плане | CVE-2005-3625Эксплойта нет | Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial libextractor · libextractor · CWE-399 | Критическая10,0 | — | 3,8 % | 31 дек. 2005 г. |
41В плане | CVE-2003-0041Эксплойта нет | Kerberos FTP client allows remote FTP sites to execute arbitrary code via a pipe (|) character in a filename that is retrieved by the clientmit · kerberos ftp client · CWE-78 | Критическая10,0 | — | 3,5 % | 19 февр. 2003 г. |
41В плане | CVE-2001-0388Эксплойта нет | time server daemon timed allows remote attackers to cause a denial of service via malformed packets.freebsd · freebsd | Критическая10,0 | — | 2,7 % | 27 июн. 2001 г. |
41В плане | CVE-2000-1042Эксплойта нет | Buffer overflow in ypserv in Mandrake Linux 7.1 and earlier, and possibly other Linux operating systems, allows an attacker to gain root primandrakesoft · mandrake linux | Критическая10,0 | — | 1,9 % | 11 дек. 2000 г. |
41В плане | CVE-2004-1188Эксплойта нет | The pnm_get_chunk function in xine 0.99.2 and earlier, and other packages such as MPlayer that use the same code, does not properly verify tmplayer · mplayer | Критическая10,0 | — | 1,9 % | 10 янв. 2005 г. |
41В плане | CVE-2000-1043Эксплойта нет | Format string vulnerability in ypserv in Mandrake Linux 7.1 and earlier, and possibly other Linux operating systems, allows an attacker to gmandrakesoft · mandrake linux | Критическая10,0 | — | 1,8 % | 11 дек. 2000 г. |
36Наблюдать | CVE-2004-0933Proof of concept | Computer Associates (CA) InoculateIT 6.0, eTrust Antivirus r6.0 through r7.1, eTrust Antivirus for the Gateway r7.0 and r7.1, eTrust Secure ca · etrust antivirus | Высокая7,5 | — | 20,8 % | 27 янв. 2005 г. |
36Наблюдать | CVE-2004-1096Proof of concept | Archive::Zip Perl module before 1.14, when used by antivirus programs such as amavisd-new, allows remote attackers to bypass antivirus protebroadcom · brightstor arcserve backup | Высокая7,5 | — | 18,4 % | 10 янв. 2005 г. |
36Наблюдать | CVE-2007-1351Эксплойта нет | Integer overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont before 20070403 and (2) freetype 2.3.2 and earlier allx.org · libxfont · CWE-189 | Высокая8,5 | — | 5,6 % | 5 апр. 2007 г. |
35Наблюдать | CVE-2007-4938Proof of concept | Heap-based buffer overflow in libmpdemux/aviheader.c in MPlayer 1.0rc1 and earlier allows remote attackers to cause a denial of service (appibm · aix · CWE-119 | Высокая7,6 | — | 16,0 % | 18 сент. 2007 г. |
35Наблюдать | CVE-2004-0935Proof of concept | Eset Anti-Virus before 1.020 (16th September 2004) allows remote attackers to bypass antivirus protection via a compressed file with both loarchive zip · archive zip | Высокая7,5 | — | 15,4 % | 27 янв. 2005 г. |
34Наблюдать | CVE-2004-0934Proof of concept | Kaspersky 3.x to 4.x allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to ca · etrust antivirus | Высокая7,5 | — | 14,9 % | 27 янв. 2005 г. |
34Наблюдать | CVE-2004-0937Proof of concept | Sophos Anti-Virus before 3.87.0, and Sophos Anti-Virus for Windows 95, 98, and Me before 3.88.0, allows remote attackers to bypass antivirussophos · sophos anti-virus | Высокая7,5 | — | 14,9 % | 9 февр. 2005 г. |
34Наблюдать | CVE-2004-0936Proof of concept | RAV antivirus allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, wca · etrust antivirus | Высокая7,5 | — | 14,9 % | 27 янв. 2005 г. |
33Наблюдать | CVE-2001-0136Proof of concept | Memory leak in ProFTPd 1.2.0rc2 allows remote attackers to cause a denial of service via a series of USER commands, and possibly SIZE commanproftpd · proftpd · CWE-401 | Средняя5,0 | — | 44,9 % | 12 мар. 2001 г. |
32Наблюдать | CVE-2004-0803Эксплойта нет | Multiple vulnerabilities in the RLE (run length encoding) decoders for libtiff 3.6.1 and earlier, related to buffer overflows and integer ovlibtiff · libtiff | Высокая7,5 | — | 8,2 % | 23 дек. 2004 г. |
- CVE-2004-046054В плане
Buffer overflow in the logging capability for the DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13 allows remote attackers to cause
КритическаяCVSS 10,0Эксплойта нетEPSS 45 %isc · dhcpd6 авг. 2004 г.
- CVE-2004-093249В плане
McAfee Anti-Virus Engine DATS drivers before 4398 released on Oct 13th 2004 and DATS Driver before 4397 October 6th 2004 allows remote attac
ВысокаяCVSS 7,5Proof of conceptEPSS 63 %ca · etrust antivirus27 янв. 2005 г.
- CVE-2004-038648В плане
Buffer overflow in the HTTP parser for MPlayer 1.0pre3 and earlier, 0.90, and 0.91 allows remote attackers to execute arbitrary code via a l
КритическаяCVSS 10,0Proof of conceptEPSS 26 %mplayer · mplayer4 мая 2004 г.
- CVE-2004-046145В плане
The DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13, when compiled in environments that do not provide the vsnprintf function, uses
КритическаяCVSS 10,0Эксплойта нетEPSS 16 %isc · dhcpd6 авг. 2004 г.
- CVE-2000-084445В плане
Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attacke
КритическаяCVSS 10,0Proof of conceptEPSS 15 %caldera · openlinux ebuilder14 нояб. 2000 г.
- CVE-2002-008343В плане
Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious servers to gain privileges.
КритическаяCVSS 9,8Proof of conceptEPSS 14 %immunix · immunix15 мар. 2002 г.
- CVE-2003-043442В плане
Various PDF viewers including (1) Adobe Acrobat 5.06 and (2) Xpdf 1.01 allow remote attackers to execute arbitrary commands via shell metach
ВысокаяCVSS 7,5Proof of conceptEPSS 40 %adobe · acrobat24 июл. 2003 г.
- CVE-2007-154342В плане
Stack-based buffer overflow in the accept_att_local function in server/os/connection.c in Network Audio System (NAS) before 1.8a SVN 237 all
КритическаяCVSS 10,0Эксплойта нетEPSS 8 %mandrakesoft · mandrake linux20 мар. 2007 г.
- CVE-2004-118742В плане
Heap-based buffer overflow in the pnm_get_chunk function for xine 0.99.2, and other packages such as MPlayer that use the same code, allows
КритическаяCVSS 10,0Эксплойта нетEPSS 5 %mplayer · mplayer10 янв. 2005 г.
- CVE-2005-362541В плане
Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial
КритическаяCVSS 10,0Эксплойта нетEPSS 3 %libextractor · libextractor31 дек. 2005 г.
- CVE-2003-004141В плане
Kerberos FTP client allows remote FTP sites to execute arbitrary code via a pipe (|) character in a filename that is retrieved by the client
КритическаяCVSS 10,0Эксплойта нетEPSS 3 %mit · kerberos ftp client19 февр. 2003 г.
- CVE-2001-038841В плане
time server daemon timed allows remote attackers to cause a denial of service via malformed packets.
КритическаяCVSS 10,0Эксплойта нетEPSS 2 %freebsd · freebsd27 июн. 2001 г.
- CVE-2000-104241В плане
Buffer overflow in ypserv in Mandrake Linux 7.1 and earlier, and possibly other Linux operating systems, allows an attacker to gain root pri
КритическаяCVSS 10,0Эксплойта нетEPSS 1 %mandrakesoft · mandrake linux11 дек. 2000 г.
- CVE-2004-118841В плане
The pnm_get_chunk function in xine 0.99.2 and earlier, and other packages such as MPlayer that use the same code, does not properly verify t
КритическаяCVSS 10,0Эксплойта нетEPSS 1 %mplayer · mplayer10 янв. 2005 г.
- CVE-2000-104341В плане
Format string vulnerability in ypserv in Mandrake Linux 7.1 and earlier, and possibly other Linux operating systems, allows an attacker to g
КритическаяCVSS 10,0Эксплойта нетEPSS 1 %mandrakesoft · mandrake linux11 дек. 2000 г.
- CVE-2004-093336Наблюдать
Computer Associates (CA) InoculateIT 6.0, eTrust Antivirus r6.0 through r7.1, eTrust Antivirus for the Gateway r7.0 and r7.1, eTrust Secure
ВысокаяCVSS 7,5Proof of conceptEPSS 20 %ca · etrust antivirus27 янв. 2005 г.
- CVE-2004-109636Наблюдать
Archive::Zip Perl module before 1.14, when used by antivirus programs such as amavisd-new, allows remote attackers to bypass antivirus prote
ВысокаяCVSS 7,5Proof of conceptEPSS 18 %broadcom · brightstor arcserve backup10 янв. 2005 г.
- CVE-2007-135136Наблюдать
Integer overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont before 20070403 and (2) freetype 2.3.2 and earlier all
ВысокаяCVSS 8,5Эксплойта нетEPSS 5 %x.org · libxfont5 апр. 2007 г.
- CVE-2007-493835Наблюдать
Heap-based buffer overflow in libmpdemux/aviheader.c in MPlayer 1.0rc1 and earlier allows remote attackers to cause a denial of service (app
ВысокаяCVSS 7,6Proof of conceptEPSS 16 %ibm · aix18 сент. 2007 г.
- CVE-2004-093535Наблюдать
Eset Anti-Virus before 1.020 (16th September 2004) allows remote attackers to bypass antivirus protection via a compressed file with both lo
ВысокаяCVSS 7,5Proof of conceptEPSS 15 %archive zip · archive zip27 янв. 2005 г.
- CVE-2004-093434Наблюдать
Kaspersky 3.x to 4.x allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to
ВысокаяCVSS 7,5Proof of conceptEPSS 14 %ca · etrust antivirus27 янв. 2005 г.
- CVE-2004-093734Наблюдать
Sophos Anti-Virus before 3.87.0, and Sophos Anti-Virus for Windows 95, 98, and Me before 3.88.0, allows remote attackers to bypass antivirus
ВысокаяCVSS 7,5Proof of conceptEPSS 14 %sophos · sophos anti-virus9 февр. 2005 г.
- CVE-2004-093634Наблюдать
RAV antivirus allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, w
ВысокаяCVSS 7,5Proof of conceptEPSS 14 %ca · etrust antivirus27 янв. 2005 г.
- CVE-2001-013633Наблюдать
Memory leak in ProFTPd 1.2.0rc2 allows remote attackers to cause a denial of service via a series of USER commands, and possibly SIZE comman
СредняяCVSS 5,0Proof of conceptEPSS 44 %proftpd · proftpd12 мар. 2001 г.
- CVE-2004-080332Наблюдать
Multiple vulnerabilities in the RLE (run length encoding) decoders for libtiff 3.6.1 and earlier, related to buffer overflows and integer ov
ВысокаяCVSS 7,5Эксплойта нетEPSS 8 %libtiff · libtiff23 дек. 2004 г.