immunix vulnerabilities and fixes

Recent CVEs affecting immunix, with upgrade or downgrade steps. 26 tracked.

immunix has 26 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 6. Most recent: 2003-06-16. Highest priority: CVE-2002-0083 (score 73/100).

• CVE-2000-0963 HIGH 7.2 DOWNGRADE MITIGATE Buffer overflow in ncurses library allows local users to execute arbitrary commands via long environmental inf
• CVE-2002-1565 HIGH 7.5 DOWNGRADE Buffer overflow in url_filename function for wget 1.8.1 allows attackers to cause a denial of service (segment
• CVE-2002-0083 CRITICAL 9.8 DOWNGRADE DOWNGRADE Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious serve
• CVE-2001-1030 HIGH 7.5 DOWNGRADE DOWNGRADE Squid before 2.3STABLE5 in HTTP accelerator mode does not enable access control lists (ACLs) when the httpd_ac
• CVE-2001-0738 MEDIUM 5.0 DOWNGRADE MITIGATE LogLine function in klogd in sysklogd 1.3 in various Linux distributions allows an attacker to cause a denial
• CVE-2001-0736 LOW 2.1 DOWNGRADE UPGRADE Vulnerability in (1) pine before 4.33 and (2) the pico editor, included with pine, allows local users local us
• CVE-2001-0641 MEDIUM 4.6 DOWNGRADE MITIGATE Buffer overflow in man program in various distributions of Linux allows local user to execute arbitrary code a
• CVE-2001-0473 HIGH 7.5 DOWNGRADE UPGRADE Format string vulnerability in Mutt before 1.2.5 allows a remote malicious IMAP server to execute arbitrary co
• CVE-2001-0416 LOW 2.1 DOWNGRADE DOWNGRADE sgml-tools (aka sgmltools) before 1.0.9-15 creates temporary files with insecure permissions, which allows oth
• CVE-2001-0170 LOW 2.1 DOWNGRADE MITIGATE glibc 2.1.9x and earlier does not properly clear the RESOLV_HOST_CONF, HOSTALIASES, or RES_OPTIONS environment
• CVE-2001-0143 LOW 1.2 DOWNGRADE MITIGATE vpop3d program in linuxconf 1.23r and earlier allows local users to overwrite arbitrary files via a symlink at
• CVE-2001-0142 LOW 1.2 DOWNGRADE DOWNGRADE squid 2.3 and earlier allows local users to overwrite arbitrary files via a symlink attack in some configurati
• CVE-2001-0140 LOW 1.2 DOWNGRADE MITIGATE arpwatch 2.1a4 allows local users to overwrite arbitrary files via a symlink attack in some configurations.
• CVE-2001-0139 LOW 1.2 DOWNGRADE DOWNGRADE inn 2.2.3 allows local users to overwrite arbitrary files via a symlink attack in some configurations.
• CVE-2001-0138 LOW 1.2 DOWNGRADE MITIGATE privatepw program in wu-ftpd before 2.6.1-6 allows local users to overwrite arbitrary files via a symlink atta
• CVE-2001-0120 LOW 1.2 DOWNGRADE MITIGATE useradd program in shadow-utils program may allow local users to overwrite arbitrary files via a symlink attac
• CVE-2001-0119 LOW 1.2 DOWNGRADE MITIGATE getty_ps 2.0.7j allows local users to overwrite arbitrary files via a symlink attack.
• CVE-2001-0118 LOW 1.2 DOWNGRADE MITIGATE rdist 6.1.5 allows local users to overwrite arbitrary files via a symlink attack.
• CVE-2001-0117 LOW 1.2 DOWNGRADE MITIGATE sdiff 2.7 in the diffutils package allows local users to overwrite files via a symlink attack.
• CVE-2001-0116 LOW 1.2 DOWNGRADE MITIGATE gpm 1.19.3 allows local users to overwrite arbitrary files via a symlink attack.
• CVE-2000-1214 MEDIUM 4.6 DOWNGRADE UPGRADE Buffer overflows in the (1) outpack or (2) buf variables of ping in iputils before 20001010, as distributed on
• CVE-2000-1213 HIGH 7.5 DOWNGRADE UPGRADE ping in iputils before 20001010, as distributed on Red Hat Linux 6.2 through 7J and other operating systems, d
• CVE-2000-1208 HIGH 7.2 DOWNGRADE MITIGATE Format string vulnerability in startprinting() function of printjob.c in BSD-based lpr lpd package may allow l
• CVE-2000-1134 HIGH 7.2 DOWNGRADE MITIGATE Multiple shell programs on various Unix systems, including (1) tcsh, (2) csh, (3) sh, and (4) bash, follow sym
• CVE-2000-1095 HIGH 7.2 DOWNGRADE MITIGATE modprobe in the modutils 2.3.x package on Linux systems allows a local user to execute arbitrary commands via
• CVE-2000-0844 HIGH 10.0 DOWNGRADE DOWNGRADE Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strin

FAQ

How do I fix immunix vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is immunix being exploited right now?

None of the tracked immunix CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which immunix CVE should I patch first?

CVE-2002-0083 currently ranks highest (73/100): Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious serve.

RSS feed for immunix · ← Back to latest CVEs