mandrake linux corporate server vulnerabilities and fixes

Recent CVEs affecting mandrake linux corporate server, with upgrade or downgrade steps. 40 tracked.

Also searched as: mandrakelinuxcorporateserver.

mandrake linux corporate server has 40 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 6. Most recent: 2008-01-12. Highest priority: CVE-2003-0434 (score 61/100).

• CVE-2007-6284 MEDIUM 5.0 MITIGATE MITIGATE The xmlCurrentChar function in libxml2 before 2.6.31 allows context-dependent attackers to cause a denial of s
• CVE-2007-0454 HIGH 7.5 DOWNGRADE MITIGATE Format string vulnerability in the afsacl.so VFS module in Samba 3.0.6 through 3.0.23d allows context-dependen
• CVE-2005-2377 MEDIUM 5.0 MITIGATE MITIGATE nss_ldap 181 to versions before 213, as used in Mandrake Corporate Server and Mandrake 10.0, and other operati
• CVE-2005-0473 MEDIUM 5.0 DOWNGRADE MITIGATE The HTML parsing functions in Gaim before 1.1.3 allow remote attackers to cause a denial of service (applicati
• CVE-2005-0472 MEDIUM 5.0 DOWNGRADE MITIGATE Gaim before 1.1.3 allows remote attackers to cause a denial of service (infinite loop) via malformed SNAC pack
• CVE-2005-0085 MEDIUM 6.8 DOWNGRADE MITIGATE Cross-site scripting (XSS) vulnerability in ht://dig (htdig) before 3.1.6-r7 allows remote attackers to execut
• CVE-2005-0020 HIGH 7.2 DOWNGRADE MITIGATE Buffer overflow in playmidi before 2.4 allows local users to execute arbitrary code.
• CVE-2004-2395 LOW 2.1 DOWNGRADE MITIGATE Memory leak in passwd 0.68 allows local users to cause a denial of service (memory consumption) via a large nu
• CVE-2004-2394 LOW 2.1 DOWNGRADE MITIGATE Off-by-one error in passwd 0.68 and earlier, when using the --stdin option, causes passwd to use the first 78
• CVE-2004-2392 MEDIUM 5.0 MITIGATE MITIGATE libuser 0.51.7 allows attackers to cause a denial of service (crash or disk consumption) via unknown attack ve
• CVE-2004-1180 MEDIUM 5.0 MITIGATE MITIGATE Unknown vulnerability in the rwho daemon (rwhod) before 0.17, on little endian architectures, allows remote at
• CVE-2004-1098 HIGH 7.5 DOWNGRADE MITIGATE MIMEDefang in MIME-tools 5.414 allows remote attackers to bypass virus scanning capabilities via an e-mail att
• CVE-2004-1051 HIGH 7.2 DOWNGRADE MITIGATE sudo before 1.6.8p2 allows local users to execute arbitrary commands by using "()" style environment variables
• CVE-2004-1014 MEDIUM 5.0 DOWNGRADE MITIGATE statd in nfs-utils 1.257 and earlier does not ignore the SIGPIPE signal, which allows remote attackers to caus
• CVE-2004-0983 MEDIUM 5.0 DOWNGRADE MITIGATE The CGI module in Ruby 1.6 before 1.6.8, and 1.8 before 1.8.2, allows remote attackers to cause a denial of se
• CVE-2004-0977 LOW 2.1 UPGRADE MITIGATE The make_oidjoins_check script in PostgreSQL 7.4.5 and earlier allows local users to overwrite files via a sym
• CVE-2004-0975 LOW 2.1 DOWNGRADE MITIGATE The der_chop script in the openssl package in Trustix Secure Linux 1.5 through 2.1 and other operating systems
• CVE-2004-0974 LOW 2.1 DOWNGRADE MITIGATE The netatalk package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows loc
• CVE-2004-0834 HIGH 7.2 DOWNGRADE DOWNGRADE Format string vulnerability in Speedtouch USB driver before 1.3.1 allows local users to execute arbitrary code
• CVE-2004-0805 HIGH 7.5 DOWNGRADE MITIGATE Buffer overflow in layer2.c in mpg123 0.59r and possibly mpg123 0.59s allows remote attackers to execute arbit
• CVE-2004-0587 LOW 2.1 MITIGATE MITIGATE Insecure permissions for the /proc/scsi/qla2300/HbaApiNode file in Linux allows local users to cause a denial
• CVE-2004-0581 MEDIUM 4.6 DOWNGRADE MITIGATE ksymoops-gznm script in Mandrake Linux 9.1 through 10.0, and Corporate Server 2.1, allows local users to delet
• CVE-2004-0565 LOW 2.1 DOWNGRADE MITIGATE Floating point information leak in the context switch code for Linux 2.4.x only checks the MFH bit but does no
• CVE-2004-0559 LOW 2.1 DOWNGRADE DOWNGRADE The maketemp.pl script in Usermin 1.070 and 1.080 allows local users to overwrite arbitrary files at install t
• CVE-2004-0497 LOW 2.1 DOWNGRADE MITIGATE Unknown vulnerability in Linux kernel 2.x may allow local users to modify the group ID of files, such as NFS e
• CVE-2003-0462 LOW 1.2 DOWNGRADE MITIGATE A race condition in the way env_start and env_end pointers are initialized in the execve system call and used
• CVE-2003-0434 HIGH 7.5 DOWNGRADE DOWNGRADE Various PDF viewers including (1) Adobe Acrobat 5.06 and (2) Xpdf 1.01 allow remote attackers to execute arbit
• CVE-2002-0638 MEDIUM 6.2 DOWNGRADE MITIGATE setpwnam.c in the util-linux package, as included in Red Hat Linux 7.3 and earlier, and other operating system
• CVE-2001-1449 HIGH 7.5 DOWNGRADE DOWNGRADE The default installation of Apache before 1.3.19 on Mandrake Linux 7.1 through 8.0 and Linux Corporate Server
• CVE-2001-1030 HIGH 7.5 DOWNGRADE DOWNGRADE Squid before 2.3STABLE5 in HTTP accelerator mode does not enable access control lists (ACLs) when the httpd_ac
• CVE-2001-0977 MEDIUM 5.0 DOWNGRADE DOWNGRADE slapd in OpenLDAP 1.x before 1.2.12, and 2.x before 2.0.8, allows remote attackers to cause a denial of servic
• CVE-2001-0736 LOW 2.1 DOWNGRADE UPGRADE Vulnerability in (1) pine before 4.33 and (2) the pico editor, included with pine, allows local users local us
• CVE-2001-0441 HIGH 7.5 UPGRADE MITIGATE Buffer overflow in (1) wrapping and (2) unwrapping functions of slrn news reader before 0.9.7.0 allows remote
• CVE-2001-0439 HIGH 7.5 UPGRADE MITIGATE licq before 1.0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in a URL.
• CVE-2001-0279 HIGH 7.2 MITIGATE MITIGATE Buffer overflow in sudo earlier than 1.6.3p6 allows local users to gain root privileges.
• CVE-2001-0178 LOW 2.1 MITIGATE MITIGATE kdesu program in KDE2 (KDE before 2.2.0-6) does not properly verify the owner of a UNIX socket that is used to
• CVE-2001-0169 LOW 2.1 MITIGATE MITIGATE When using the LD_PRELOAD environmental variable in SUID or SGID applications, glibc does not verify that prel
• CVE-2001-0138 LOW 1.2 DOWNGRADE MITIGATE privatepw program in wu-ftpd before 2.6.1-6 allows local users to overwrite arbitrary files via a symlink atta
• CVE-2001-0125 LOW 1.2 UPGRADE MITIGATE exmh 2.2 and earlier allows local users to overwrite arbitrary files via a symlink attack on the exmhErrorMsg
• CVE-2001-0117 LOW 1.2 DOWNGRADE MITIGATE sdiff 2.7 in the diffutils package allows local users to overwrite files via a symlink attack.

FAQ

How do I fix mandrake linux corporate server vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is mandrake linux corporate server being exploited right now?

None of the tracked mandrake linux corporate server CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which mandrake linux corporate server CVE should I patch first?

CVE-2003-0434 currently ranks highest (61/100): Various PDF viewers including (1) Adobe Acrobat 5.06 and (2) Xpdf 1.01 allow remote attackers to execute arbit.

RSS feed for mandrake linux corporate server · ← Back to latest CVEs