Vulnerabilities (CVE)

Filtered by vendor Suse Subscribe
Total 1181 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-1999-0405 4 Debian, Freebsd, Redhat and 1 more 4 Debian Linux, Freebsd, Linux and 1 more 2008-09-09 7.2 HIGH N/A
A buffer overflow in lsof allows local users to obtain root privilege.
CVE-1999-0363 2 Plp, Suse 2 Line Printer Control, Suse Linux 2008-09-09 7.2 HIGH N/A
SuSE 5.2 PLP lpc program has a buffer overflow that leads to root compromise.
CVE-1999-0462 1 Suse 1 Suse Linux 2008-09-09 7.2 HIGH N/A
suidperl in Linux Perl does not check the nosuid mount option on file systems, allowing local users to gain root access by placing a setuid script in a mountable file system, e.g. a CD-ROM or floppy disk.
CVE-1999-0409 1 Suse 1 Suse Linux 2008-09-09 4.6 MEDIUM N/A
Buffer overflow in gnuplot in Linux version 3.5 allows local users to obtain root access.
CVE-1999-0434 5 Caldera, Debian, Netbsd and 2 more 5 Openlinux, Debian Linux, Netbsd and 2 more 2008-09-09 7.5 HIGH N/A
XFree86 xfs command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial of service.
CVE-2008-0732 2 Apache, Suse 2 Geronimo, Suse Linux 2008-09-05 2.1 LOW N/A
The init script for Apache Geronimo on SUSE Linux follows symlinks when performing a chown operation, which might allow local users to obtain access to unspecified files or directories.
CVE-2008-0731 3 Linux, Novell, Suse 3 Linux Kernel, Apparmor, Open Suse 2008-09-05 7.5 HIGH N/A
The Linux kernel before 2.6.18.8-0.8 in SUSE openSUSE 10.2 does not properly handle failure of an AppArmor change_hat system call, which might allow attackers to trigger the unconfining of an apparmored task.
CVE-2006-6662 1 Suse 3 Linux Enterprise Desktop, Suse Linux, Suse Open Enterprise Server 2008-09-05 4.1 MEDIUM N/A
Unspecified vulnerability in Linux User Management (novell-lum) on SUSE Linux Enterprise Desktop 10 and Open Enterprise Server 9, under unspecified conditions, allows local users to log in to the console without a password.
CVE-2006-0646 1 Suse 1 Suse Linux 2008-09-05 4.4 MEDIUM N/A
ld in SUSE Linux 9.1 through 10.0, and SLES 9, in certain circumstances when linking binaries, can leave an empty RPATH or RUNPATH, which allows local attackers to execute arbitrary code as other users via by running an ld-linked application from the current directory, which could contain an attacker-controlled library file.
CVE-2005-4788 1 Suse 1 Suse Linux 2008-09-05 2.1 LOW N/A
resmgr in SUSE Linux 9.2 and 9.3, and possibly other distributions, allows local users to bypass access control rules for USB devices via "alternate syntax for specifying USB devices."
CVE-2005-4778 1 Suse 2 Suse Linux, Suse Sled Beagle 2008-09-05 2.1 LOW N/A
The powersave daemon in SUSE Linux 10.0 before 20051007 has an unspecified "configuration problem," which allows local users to suspend the computer and possibly perform certain other unauthorized actions.
CVE-2005-4789 1 Suse 1 Suse Linux 2008-09-05 2.1 LOW N/A
resmgr in SUSE Linux 9.2 and 9.3, and possibly other distributions, does not properly enforce class-specific exclude rules in some situations, which allows local users to bypass intended access restrictions for USB devices that set their class ID at the interface level.
CVE-2005-4772 1 Suse 5 Suse Linux, Suse Linux Openexchange Server, Suse Linux School Server and 2 more 2008-09-05 6.4 MEDIUM N/A
liby2util in Yet another Setup Tool (YaST) in SUSE Linux before 20051007 preserves permissions and ownerships when copying a remote repository, which might allow local users to read or modify sensitive files, possibly giving local users the ability to exploit CVE-2005-3013.
CVE-2005-3147 2 Storebackup, Suse 2 Storebackup, Suse Linux 2008-09-05 2.1 LOW N/A
StoreBackup before 1.19 creates the backup root with world-readable permissions, which allows local users to obtain sensitive information.
CVE-2005-3148 2 Storebackup, Suse 2 Storebackup, Suse Linux 2008-09-05 4.6 MEDIUM N/A
StoreBackup before 1.19 does not properly set the uid and guid for symbolic links (1) that are backed up by storeBackup.pl, or (2) recovered by storeBackupRecover.pl, which could cause files to be restored with incorrect ownership.
CVE-2005-3146 2 Storebackup, Suse 2 Storebackup, Suse Linux 2008-09-05 2.1 LOW N/A
StoreBackup before 1.19 allows local users to perform unauthorized operations on arbitrary files via a symlink attack on temporary files.
CVE-2005-0639 3 Altlinux, Suse, Xli 3 Alt Linux, Suse Linux, Xli 2008-09-05 7.5 HIGH N/A
Multiple vulnerabilities in xli before 1.17 may allow remote attackers to execute arbitrary code via "buffer management errors" from certain image properties, some of which may be related to integer overflows in PPM files.
CVE-2004-2658 1 Suse 1 Suse Linux 2008-09-05 2.1 LOW N/A
resmgr in SUSE CORE 9 does not properly identify terminal names, which allows local users to spoof terminals and login types.
CVE-2003-1538 1 Suse 3 Office Server, Suse Linux, Suse Linux Openexchange Server 2008-09-05 6.4 MEDIUM N/A
susehelp in SuSE Linux 8.1, Enterprise Server 8, Office Server, and Openexchange Server 4 does not properly filter shell metacharacters, which allows remote attackers to execute arbitrary commands via CGI queries.
CVE-2003-1295 2 Redhat, Suse 2 Enterprise Linux, Suse Linux 2008-09-05 2.1 LOW N/A
Unspecified vulnerability in xscreensaver 4.12, and possibly other versions, allows attackers to cause xscreensaver to crash via unspecified vectors "while verifying the user-password."