CVE-2011-4613
Published Feb 5, 2014The X.Org X wrapper (xserver-wrapper.c) in Debian GNU/Linux and Ubuntu Linux does not properly verify the TTY of a user who is starting X, which allows local users to bypass inten…
Vendor/product archive
ubuntu / linux CVEs
Beta · best-effort7 CVEs tagged to ubuntu / linux — 2 Critical, 0 High, 5 Medium, 0 Low, 0 Unrated.
CVE-2009-1601
Published May 11, 2009The Ubuntu clamav-milter.init script in clamav-milter before 0.95.1+dfsg-1ubuntu1.2 in Ubuntu 9.04 sets the ownership of the current working directory to the clamav account, which…
CVE-2008-6792
Published May 7, 2009system-tools-backends before 2.6.0-1ubuntu1.1 in Ubuntu 8.10, as used by "Users and Groups" in GNOME System Tools, hashes account passwords with 3DES and consequently limits effec…
CVE-2009-1573
Published May 6, 2009xvfb-run 1.6.1 in Debian GNU/Linux, Ubuntu, Fedora 10, and possibly other operating systems place the magic cookie (MCOOKIE) on the command line, which allows local users to gain…
CVE-2006-7236
Published Jan 2, 2009The default configuration of xterm on Debian GNU/Linux sid and possibly Ubuntu enables the allowWindowOps resource, which allows user-assisted attackers to execute arbitrary code…
CVE-2008-4306
Published Nov 4, 2008Buffer overflow in enscript before 1.6.4 has unknown impact and attack vectors, possibly related to the font escape sequence.
CVE-2008-2285
Published May 18, 2008The ssh-vulnkey tool on Ubuntu Linux 7.04, 7.10, and 8.04 LTS does not recognize authorized_keys lines that contain options, which makes it easier for remote attackers to exploit…
Showing 1-7 of 7 CVEsPage 1 of 1