https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2018-19754.htmlhttps://patchthecve.com/cve/CVE-2018-19754.htmlWed, 17 Jun 2026 01:49:48 +0000HIGH 8.8: Tarantella Enterprise before 3.11 allows bypassing Access Control.https://patchthecve.com/cve/CVE-2018-19753.htmlhttps://patchthecve.com/cve/CVE-2018-19753.htmlWed, 17 Jun 2026 01:49:48 +0000HIGH 7.5: Tarantella Enterprise before 3.11 allows Directory Traversal.https://patchthecve.com/cve/CVE-2005-0486.htmlhttps://patchthecve.com/cve/CVE-2005-0486.htmlTue, 16 Jun 2026 22:11:13 +0000MEDIUM 5.0: Tarantella Secure Global Desktop Enterprise Edition 4.00 and 3.42, and Tarantella Enterprise 3 3.40 and 3.30, when using RSA SecurID and multiple users have the same username, reveals sensitive information during authentication, which allows remote attackers to identify valid usernames and the authehttps://patchthecve.com/cve/CVE-2002-0296.htmlhttps://patchthecve.com/cve/CVE-2002-0296.htmlTue, 16 Jun 2026 21:57:09 +0000LOW 1.2: The installation of Tarantella Enterprise 3 allows local users to overwrite arbitrary files via a symlink attack on the "spinning" temporary file.https://patchthecve.com/cve/CVE-2002-0211.htmlhttps://patchthecve.com/cve/CVE-2002-0211.htmlTue, 16 Jun 2026 21:57:00 +0000MEDIUM 6.2: Race condition in the installation script for Tarantella Enterprise 3 3.01 through 3.20 creates a world-writeable temporary "gunzip" program before executing it, which could allow local users to execute arbitrary commands by modifying the program before it is executed.https://patchthecve.com/cve/CVE-2002-0203.htmlhttps://patchthecve.com/cve/CVE-2002-0203.htmlTue, 16 Jun 2026 21:56:59 +0000MEDIUM 5.0: ttawebtop.cgi in Tarantella Enterprise 3.20 on SPARC Solaris and Linux, and 3.1x and 3.0x including 3.11.903, allows remote attackers to view directory contents via an empty pg parameter.https://patchthecve.com/cve/CVE-2001-0805.htmlhttps://patchthecve.com/cve/CVE-2001-0805.htmlTue, 16 Jun 2026 21:54:59 +0000MEDIUM 5.0: Directory traversal vulnerability in ttawebtop.cgi in Tarantella Enterprise 3.00 and 3.01 allows remote attackers to read arbitrary files via a .. (dot dot) in the pg parameter.