openpkg vulnerabilities

Recent CVEs affecting openpkg products. 27 tracked.

openpkg has 27 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 7. Most recent: 2007-11-07. Highest priority: CVE-2002-0083 (score 73/100).

• CVE-2007-5116 HIGH 7.5 DOWNGRADE DOWNGRADE Buffer overflow in the polymorphic opcode support in the Regular Expression Engine (regcomp.c) in Perl 5.8 all
• CVE-2005-0373 HIGH 7.5 DOWNGRADE DOWNGRADE Buffer overflow in digestmd5.c CVS release 1.170 (also referred to as digestmda5.c), as used in the DIGEST-MD5
• CVE-2004-1997 MEDIUM 4.6 DOWNGRADE DOWNGRADE Kolab stores OpenLDAP passwords in plaintext in the slapd.conf file, which may be installed world-readable, wh
• CVE-2004-1471 HIGH 7.1 DOWNGRADE DOWNGRADE Format string vulnerability in wrapper.c in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16 allows remot
• CVE-2004-1065 HIGH 10.0 DOWNGRADE DOWNGRADE Buffer overflow in the exif_read_data function in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote atta
• CVE-2004-1019 HIGH 10.0 DOWNGRADE DOWNGRADE The deserialization code in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to cause a denia
• CVE-2004-1013 HIGH 10.0 DOWNGRADE DOWNGRADE The argument parser of the FETCH command in Cyrus IMAP Server 2.2.x through 2.2.8 allows remote authenticated
• CVE-2004-1012 HIGH 10.0 DOWNGRADE DOWNGRADE The argument parser of the PARTIAL command in Cyrus IMAP Server 2.2.6 and earlier allows remote authenticated
• CVE-2004-1011 HIGH 10.0 DOWNGRADE DOWNGRADE Stack-based buffer overflow in Cyrus IMAP Server 2.2.4 through 2.2.8, with the imapmagicplus option enabled, a
• CVE-2004-0990 HIGH 10.0 DOWNGRADE DOWNGRADE Integer overflow in GD Graphics Library libgd 2.0.28 (libgd2), and possibly other versions, allows remote atta
• CVE-2004-0957 MEDIUM 6.8 DOWNGRADE DOWNGRADE Unknown vulnerability in MySQL 3.23.58 and earlier, when a local user has privileges for a database whose name
• CVE-2004-0940 HIGH 7.8 UPGRADE DOWNGRADE Buffer overflow in the get_tag function in mod_include for Apache 1.3.x to 1.3.32 allows local users who can c
• CVE-2004-0918 MEDIUM 5.0 DOWNGRADE DOWNGRADE The asn_parse_header function (asn1.c) in the SNMP module for Squid Web Proxy Cache before 2.4.STABLE7 allows
• CVE-2004-0772 CRITICAL 9.8 UPGRADE DOWNGRADE Double free vulnerabilities in error handling code in krb524d for MIT Kerberos 5 (krb5) 1.2.8 and earlier may
• CVE-2004-0594 MEDIUM 5.1 DOWNGRADE MITIGATE The memory_limit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain conditions such a
• CVE-2004-0421 MEDIUM 5.0 DOWNGRADE DOWNGRADE The Portable Network Graphics library (libpng) 1.0.15 and earlier allows attackers to cause a denial of servic
• CVE-2004-0418 HIGH 10.0 DOWNGRADE DOWNGRADE serve_notify in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle empty data lin
• CVE-2004-0417 MEDIUM 5.0 DOWNGRADE DOWNGRADE Integer overflow in the "Max-dotdot" CVS protocol command (serve_max_dotdot) for CVS 1.12.x through 1.12.8, an
• CVE-2004-0416 HIGH 10.0 DOWNGRADE DOWNGRADE Double free vulnerability for the error_prog_name string in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11
• CVE-2004-0414 HIGH 10.0 DOWNGRADE DOWNGRADE CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle malformed "Entry" lines, which
• CVE-2004-0413 HIGH 10.0 DOWNGRADE DOWNGRADE libsvn_ra_svn in Subversion 1.0.4 trusts the length field of (1) svn://, (2) svn+ssh://, and (3) other svn pro
• CVE-2004-0333 HIGH 10.0 MITIGATE DOWNGRADE Buffer overflow in the UUDeview package, as used in WinZip 6.2 through WinZip 8.1 SR-1, and possibly other pac
• CVE-2003-0615 MEDIUM 4.3 DOWNGRADE DOWNGRADE Cross-site scripting (XSS) vulnerability in start_form() of CGI.pm allows remote attackers to insert web scrip
• CVE-2003-0190 MEDIUM 5.0 UPGRADE DOWNGRADE OpenSSH-portable (OpenSSH) 3.6.1p1 and earlier with PAM support enabled immediately sends an error message whe
• CVE-2003-0147 MEDIUM 5.0 DOWNGRADE MITIGATE OpenSSL does not use RSA blinding by default, which allows local and remote attackers to obtain the server's p
• CVE-2002-0985 HIGH 7.5 UPGRADE DOWNGRADE Argument injection vulnerability in the mail function for PHP 4.x to 4.2.2 may allow attackers to bypass safe
• CVE-2002-0083 CRITICAL 9.8 DOWNGRADE DOWNGRADE Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious serve

FAQ

How do I fix openpkg vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is openpkg being exploited right now?

None of the tracked openpkg CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which openpkg CVE should I patch first?

CVE-2002-0083 currently ranks highest (73/100): Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious serve.

Products

• openpkg

RSS feed for openpkg · ← Back to latest CVEs