Vendor/product archive

gnu / gnats CVEs

Beta · best-effort

3 CVEs tagged to gnu / gnats — 1 Critical, 0 High, 1 Medium, 1 Low, 0 Unrated.

See this archive with more filters Back to gnu vendor archive

CVE-2007-2808

Published May 22, 2007

Cross-site scripting (XSS) vulnerability in gnatsweb.pl in Gnatsweb 4.00 and Gnats 4.1.99 allows remote attackers to inject arbitrary web script or HTML via the database parameter.

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2005-2180

Published Jul 11, 2005

gen-index in GNATS 4.0, 4.1.0, and possibly earlier versions, when installed setuid, does not properly check files passed to the -o argument and opens the file with write access,…

CVSS 2.1 · Low

Vendor/product tagsBeta · best-effort

CVE-2004-0623

Published Dec 6, 2004

Format string vulnerability in misc.c in GNU GNATS 4.00 may allow remote attackers to execute arbitrary code via format string specifiers in a string that gets logged by syslog.

CVSS 10.0 · Critical

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1