conectiva vulnerabilities

Recent CVEs affecting conectiva products. 41 tracked.

conectiva has 41 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 6. Most recent: 2005-05-02. Highest priority: CVE-2002-0083 (score 73/100).

• CVE-2005-1043 MEDIUM 5.0 DOWNGRADE DOWNGRADE exif.c in PHP before 4.3.11 allows remote attackers to cause a denial of service (memory consumption and crash
• CVE-2005-0754 HIGH 7.5 DOWNGRADE MITIGATE Kommander in KDE 3.2 through KDE 3.4.0 executes data files without confirmation from the user, which allows re
• CVE-2005-0750 HIGH 7.2 MITIGATE MITIGATE The bluez_sock_create function in the Bluetooth stack for Linux kernel 2.4.6 through 2.4.30-rc1 and 2.6 throug
• CVE-2005-0736 LOW 2.1 MITIGATE MITIGATE Integer overflow in sys_epoll_wait in eventpoll.c for Linux kernel 2.6 to 2.6.11 allows local users to overwri
• CVE-2005-0699 HIGH 7.5 DOWNGRADE MITIGATE Multiple buffer overflows in the dissect_a11_radius function in the CDMA A11 (3G-A11) dissector (packet-3g-a11
• CVE-2005-0373 HIGH 7.5 DOWNGRADE DOWNGRADE Buffer overflow in digestmd5.c CVS release 1.170 (also referred to as digestmda5.c), as used in the DIGEST-MD5
• CVE-2005-0207 LOW 2.1 MITIGATE MITIGATE Unknown vulnerability in Linux kernel 2.4.x, 2.5.x, and 2.6.x allows NFS clients to cause a denial of service
• CVE-2004-1337 HIGH 7.2 DOWNGRADE MITIGATE The POSIX Capability Linux Security Module (LSM) for Linux kernel 2.6 does not properly handle the credentials
• CVE-2004-1145 MEDIUM 5.0 DOWNGRADE DOWNGRADE Multiple vulnerabilities in Konqueror in KDE 3.3.1 and earlier (1) allow access to restricted Java classes via
• CVE-2004-1142 MEDIUM 5.0 DOWNGRADE DOWNGRADE Ethereal 0.9.0 through 0.10.7 allows remote attackers to cause a denial of service (CPU consumption) via a cer
• CVE-2004-1139 MEDIUM 5.0 DOWNGRADE DOWNGRADE Unknown vulnerability in the DICOM dissector in Ethereal 0.10.4 through 0.10.7 allows remote attackers to caus
• CVE-2004-1029 HIGH 9.3 DOWNGRADE DOWNGRADE The Sun Java Plugin capability in Java 2 Runtime Environment (JRE) 1.4.2_01, 1.4.2_04, and possibly earlier ve
• CVE-2004-1013 HIGH 10.0 DOWNGRADE DOWNGRADE The argument parser of the FETCH command in Cyrus IMAP Server 2.2.x through 2.2.8 allows remote authenticated
• CVE-2004-1012 HIGH 10.0 DOWNGRADE DOWNGRADE The argument parser of the PARTIAL command in Cyrus IMAP Server 2.2.6 and earlier allows remote authenticated
• CVE-2004-1011 HIGH 10.0 DOWNGRADE DOWNGRADE Stack-based buffer overflow in Cyrus IMAP Server 2.2.4 through 2.2.8, with the imapmagicplus option enabled, a
• CVE-2004-0930 MEDIUM 5.0 DOWNGRADE DOWNGRADE The ms_fnmatch function in Samba 3.0.4 and 3.0.7 and possibly other versions allows remote authenticated users
• CVE-2004-0905 MEDIUM 4.6 DOWNGRADE DOWNGRADE Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows remote att
• CVE-2004-0904 HIGH 10.0 DOWNGRADE DOWNGRADE Integer overflow in the bitmap (BMP) decoder for Mozilla Firefox before the Preview Release, Mozilla before 1.
• CVE-2004-0903 HIGH 10.0 DOWNGRADE DOWNGRADE Stack-based buffer overflow in the writeGroup function in nsVCardObj.cpp for Mozilla Firefox before the Previe
• CVE-2004-0902 HIGH 10.0 DOWNGRADE DOWNGRADE Multiple heap-based buffer overflows in Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and
• CVE-2004-0884 HIGH 7.2 DOWNGRADE MITIGATE The (1) libsasl and (2) libsasl2 libraries in Cyrus-SASL 2.1.18 and earlier trust the SASL_PATH environment va
• CVE-2004-0882 HIGH 10.0 DOWNGRADE MITIGATE Buffer overflow in the QFILEPATHINFO request handler in Samba 3.0.x through 3.0.7 may allow remote attackers t
• CVE-2004-0827 HIGH 7.5 DOWNGRADE DOWNGRADE Multiple buffer overflows in the ImageMagick graphics library 5.x before 5.4.4, and 6.x before 6.0.6.2, allow
• CVE-2004-0817 HIGH 7.5 DOWNGRADE DOWNGRADE Multiple heap-based buffer overflows in the imlib BMP image handler allow remote attackers to execute arbitrar
• CVE-2004-0807 MEDIUM 5.0 DOWNGRADE DOWNGRADE Samba 3.0.6 and earlier allows remote attackers to cause a denial of service (infinite loop and memory exhaust
• CVE-2004-0802 MEDIUM 5.1 DOWNGRADE DOWNGRADE Buffer overflow in the BMP loader in imlib2 before 1.1.2 allows remote attackers to execute arbitrary code via
• CVE-2004-0801 HIGH 7.5 DOWNGRADE DOWNGRADE Unknown vulnerability in foomatic-rip in Foomatic before 3.0.2 allows local users or remote attackers with acc
• CVE-2004-0626 MEDIUM 5.0 MITIGATE MITIGATE The tcp_find_option function of the netfilter subsystem in Linux kernel 2.6, when using iptables and TCP optio
• CVE-2004-0557 HIGH 10.0 DOWNGRADE MITIGATE Multiple buffer overflows in the st_wavstartread function in wav.c for Sound eXchange (SoX) 12.17.2 through 12
• CVE-2004-0497 LOW 2.1 DOWNGRADE MITIGATE Unknown vulnerability in Linux kernel 2.x may allow local users to modify the group ID of files, such as NFS e
• CVE-2003-0780 HIGH 9.0 DOWNGRADE DOWNGRADE Buffer overflow in get_salt_from_password from sql_acl.cc for MySQL 4.0.14 and earlier, and 3.23.x, allows att
• CVE-2003-0540 MEDIUM 5.0 DOWNGRADE MITIGATE The address parser code in Postfix 1.1.12 and earlier allows remote attackers to cause a denial of service (lo
• CVE-2003-0468 MEDIUM 5.0 DOWNGRADE MITIGATE Postfix 1.1.11 and earlier allows remote attackers to use Postfix to conduct "bounce scans" or DDos attacks of
• CVE-2002-0083 CRITICAL 9.8 DOWNGRADE DOWNGRADE Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious serve
• CVE-2001-1375 MEDIUM 4.6 MITIGATE MITIGATE tcl/tk package (tcltk) 8.3.1 searches for its libraries in the current working directory before other director
• CVE-2001-1374 HIGH 7.2 DOWNGRADE MITIGATE expect before 5.32 searches for its libraries in /var/tmp before other directories, which could allow local us
• CVE-2001-0834 MEDIUM 6.4 UPGRADE MITIGATE htsearch CGI program in htdig (ht://Dig) 3.1.5 and earlier allows remote attackers to use the -c option to spe
• CVE-2001-0690 HIGH 7.5 UPGRADE MITIGATE Format string vulnerability in exim (3.22-10 in Red Hat, 3.12 in Debian and 3.16 in Conectiva) in batched SMTP
• CVE-2001-0473 HIGH 7.5 DOWNGRADE UPGRADE Format string vulnerability in Mutt before 1.2.5 allows a remote malicious IMAP server to execute arbitrary co
• CVE-2001-0440 HIGH 7.5 UPGRADE MITIGATE Buffer overflow in logging functions of licq before 1.0.3 allows remote attackers to cause a denial of service
• CVE-2001-0439 HIGH 7.5 UPGRADE MITIGATE licq before 1.0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in a URL.

FAQ

How do I fix conectiva vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is conectiva being exploited right now?

None of the tracked conectiva CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which conectiva CVE should I patch first?

CVE-2002-0083 currently ranks highest (73/100): Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious serve.

Products

• linux

RSS feed for conectiva · ← Back to latest CVEs