PatchTheCVEengardelinux vulnerabilities
Recent CVEs affecting engardelinux products. 7 tracked.
engardelinux has 7 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 2. Most recent: 2003-12-15. Highest priority: CVE-2002-0083 (score 73/100).
- CVE-2003-0962 HIGH 7.5 DOWNGRADE DOWNGRADE Heap-based buffer overflow in rsync before 2.5.7, when running in server mode, allows remote attackers to exec
- CVE-2003-0101 HIGH 10.0 DOWNGRADE DOWNGRADE miniserv.pl in (1) Webmin before 1.070 and (2) Usermin before 1.000 does not properly handle metacharacters su
- CVE-2002-0083 CRITICAL 9.8 DOWNGRADE DOWNGRADE Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious serve
- CVE-2002-0002 HIGH 7.5 DOWNGRADE MITIGATE Format string vulnerability in stunnel before 3.22 when used in client mode for (1) smtp, (2) pop, or (3) nntp
- CVE-2001-1240 HIGH 10.0 MITIGATE The default configuration of sudo in Engarde Secure Linux 1.0.1 allows any user in the admin group to run cert
- CVE-2001-0739 HIGH 7.2 MITIGATE Guardian Digital WebTool in EnGarde Secure Linux 1.0.1 allows restarted services to inherit some environmental
- CVE-2001-0736 LOW 2.1 DOWNGRADE UPGRADE Vulnerability in (1) pine before 4.33 and (2) the pico editor, included with pine, allows local users local us
FAQ
How do I fix engardelinux vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is engardelinux being exploited right now?
None of the tracked engardelinux CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which engardelinux CVE should I patch first?
CVE-2002-0083 currently ranks highest (73/100): Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious serve.