trustix vulnerabilities

Recent CVEs affecting trustix products. 39 tracked.

trustix has 39 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 7. Most recent: 2007-02-13. Highest priority: CVE-2004-0990 (score 70/100).

• CVE-2007-0910 HIGH 10.0 UPGRADE MITIGATE Unspecified vulnerability in PHP before 5.2.1 allows attackers to "clobber" certain super-global variables via
• CVE-2007-0909 HIGH 7.5 DOWNGRADE MITIGATE Multiple format string vulnerabilities in PHP before 5.2.1 might allow attackers to execute arbitrary code via
• CVE-2007-0907 MEDIUM 5.0 DOWNGRADE MITIGATE Buffer underflow in PHP before 5.2.1 allows attackers to cause a denial of service via unspecified vectors inv
• CVE-2007-0906 HIGH 7.5 DOWNGRADE MITIGATE Multiple buffer overflows in PHP before 5.2.1 allow attackers to cause a denial of service and possibly execut
• CVE-2007-0905 HIGH 7.5 DOWNGRADE MITIGATE PHP before 5.2.1 allows attackers to bypass safe_mode and open_basedir restrictions via unspecified vectors in
• CVE-2005-3233 MEDIUM 5.1 MITIGATE Multiple interpretation error in unspecified versions of Trustix Antivirus allows remote attackers to bypass v
• CVE-2005-1410 LOW 2.1 DOWNGRADE MITIGATE The tsearch2 module in PostgreSQL 7.4 through 8.0.x declares the (1) dex_init, (2) snb_en_init, (3) snb_ru_ini
• CVE-2005-1267 MEDIUM 5.0 DOWNGRADE MITIGATE The bgp_update_print function in tcpdump 3.x does not properly handle a -1 return value from the decode_prefix
• CVE-2005-0384 MEDIUM 5.0 MITIGATE MITIGATE Unknown vulnerability in the PPP driver for the Linux kernel 2.6.8.1 allows remote attackers to cause a denial
• CVE-2005-0001 MEDIUM 6.9 MITIGATE MITIGATE Race condition in the page fault handler (fault.c) for Linux kernel 2.2.x to 2.2.7, 2.4 to 2.4.29, and 2.6 to
• CVE-2004-2546 MEDIUM 6.4 DOWNGRADE MITIGATE Multiple memory leaks in Samba before 3.0.6 allow attackers to cause a denial of service (memory consumption).
• CVE-2004-2044 HIGH 7.5 DOWNGRADE DOWNGRADE PHP-Nuke 7.3, and other products that use the PHP-Nuke codebase such as the Nuke Cops betaNC PHP-Nuke Bundle,
• CVE-2004-1304 HIGH 10.0 DOWNGRADE MITIGATE Stack-based buffer overflow in the ELF header parsing code in file before 4.12 allows attackers to execute arb
• CVE-2004-1154 HIGH 10.0 DOWNGRADE MITIGATE Integer overflow in the Samba daemon (smbd) in Samba 2.x and 3.0.x through 3.0.9 allows remote authenticated u
• CVE-2004-1065 HIGH 10.0 DOWNGRADE DOWNGRADE Buffer overflow in the exif_read_data function in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote atta
• CVE-2004-1051 HIGH 7.2 DOWNGRADE MITIGATE sudo before 1.6.8p2 allows local users to execute arbitrary commands by using "()" style environment variables
• CVE-2004-1019 HIGH 10.0 DOWNGRADE DOWNGRADE The deserialization code in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to cause a denia
• CVE-2004-1013 HIGH 10.0 DOWNGRADE DOWNGRADE The argument parser of the FETCH command in Cyrus IMAP Server 2.2.x through 2.2.8 allows remote authenticated
• CVE-2004-1012 HIGH 10.0 DOWNGRADE DOWNGRADE The argument parser of the PARTIAL command in Cyrus IMAP Server 2.2.6 and earlier allows remote authenticated
• CVE-2004-1011 HIGH 10.0 DOWNGRADE DOWNGRADE Stack-based buffer overflow in Cyrus IMAP Server 2.2.4 through 2.2.8, with the imapmagicplus option enabled, a
• CVE-2004-0990 HIGH 10.0 DOWNGRADE DOWNGRADE Integer overflow in GD Graphics Library libgd 2.0.28 (libgd2), and possibly other versions, allows remote atta
• CVE-2004-0989 HIGH 10.0 DOWNGRADE DOWNGRADE Multiple buffer overflows in libXML 2.6.12 and 2.6.13 (libxml2), and possibly other versions, may allow remote
• CVE-2004-0977 LOW 2.1 UPGRADE MITIGATE The make_oidjoins_check script in PostgreSQL 7.4.5 and earlier allows local users to overwrite files via a sym
• CVE-2004-0957 MEDIUM 6.8 DOWNGRADE DOWNGRADE Unknown vulnerability in MySQL 3.23.58 and earlier, when a local user has privileges for a database whose name
• CVE-2004-0941 HIGH 10.0 DOWNGRADE MITIGATE Multiple buffer overflows in the gd graphics library (libgd) 2.0.21 and earlier may allow remote attackers to
• CVE-2004-0940 HIGH 7.8 UPGRADE DOWNGRADE Buffer overflow in the get_tag function in mod_include for Apache 1.3.x to 1.3.32 allows local users who can c
• CVE-2004-0918 MEDIUM 5.0 DOWNGRADE DOWNGRADE The asn_parse_header function (asn1.c) in the SNMP module for Squid Web Proxy Cache before 2.4.STABLE7 allows
• CVE-2004-0801 HIGH 7.5 DOWNGRADE DOWNGRADE Unknown vulnerability in foomatic-rip in Foomatic before 3.0.2 allows local users or remote attackers with acc
• CVE-2004-0686 MEDIUM 5.0 UPGRADE MITIGATE Buffer overflow in Samba 2.2.x to 2.2.9, and 3.0.0 to 3.0.4, when the "mangling method = hash" option is enabl
• CVE-2004-0685 MEDIUM 4.6 MITIGATE MITIGATE Certain USB drivers in the Linux 2.4 kernel use the copy_to_user function on uninitialized structures, which c
• CVE-2004-0600 HIGH 10.0 DOWNGRADE MITIGATE Buffer overflow in the Samba Web Administration Tool (SWAT) in Samba 3.0.2 to 3.0.4 allows remote attackers to
• CVE-2004-0595 MEDIUM 6.8 MITIGATE MITIGATE The strip_tags function in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, does not filter null (\0) characters w
• CVE-2004-0594 MEDIUM 5.1 DOWNGRADE MITIGATE The memory_limit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain conditions such a
• CVE-2004-0565 LOW 2.1 DOWNGRADE MITIGATE Floating point information leak in the context switch code for Linux 2.4.x only checks the MFH bit but does no
• CVE-2004-0493 MEDIUM 6.4 MITIGATE MITIGATE The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of serv
• CVE-2004-0432 HIGH 7.5 DOWNGRADE MITIGATE ProFTPD 1.2.9 treats the Allow and Deny directives for CIDR based ACL entries as if they were AllowAll, which
• CVE-2004-0421 MEDIUM 5.0 DOWNGRADE DOWNGRADE The Portable Network Graphics library (libpng) 1.0.15 and earlier allows attackers to cause a denial of servic
• CVE-2004-0415 LOW 2.1 MITIGATE MITIGATE Linux kernel does not properly convert 64-bit file offset pointers to 32 bits, which allows local users to acc
• CVE-2002-1319 LOW 2.1 MITIGATE MITIGATE The Linux kernel 2.4.20 and earlier, and 2.5.x, when running on x86 systems, allows local users to cause a den

FAQ

How do I fix trustix vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is trustix being exploited right now?

None of the tracked trustix CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which trustix CVE should I patch first?

CVE-2004-0990 currently ranks highest (70/100): Integer overflow in GD Graphics Library libgd 2.0.28 (libgd2), and possibly other versions, allows remote atta.

Products

• antivirus
• secure linux

RSS feed for trustix · ← Back to latest CVEs