Openlinux eserver

This hub aggregates every CVE we track for Openlinux eserver, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 10 most recently published vulnerabilities affecting Openlinux eserver.

• CVE-2001-0869Format string vulnerability in the default logging callback function _sasl_syslog in common.c in Cyrus SASL library (cyrus-sasl) may allow remote attackers to execute arbitrary commands.7.5Jun 25, 2002
• CVE-2001-0851Linux kernel 2.0, 2.2 and 2.4 with syncookies enabled allows remote attackers to bypass firewall rules by brute force guessing the cookie.5.0Mar 9, 2002
• CVE-2000-1195telnet daemon (telnetd) from the Linux netkit package before netkit-telnet-0.16 allows remote attackers to bypass authentication when telnetd is running with the -L command line option.7.5Mar 9, 2002
• CVE-2001-0139inn 2.2.3 allows local users to overwrite arbitrary files via a symlink attack in some configurations.1.2May 7, 2001
• CVE-2001-0181Format string vulnerability in the error logging code of DHCP server and client in Caldera Linux allows remote attackers to execute arbitrary commands.10.0Mar 9, 2001
• CVE-2000-0917Format string vulnerability in use_syslog() function in LPRng 3.6.24 allows remote attackers to execute arbitrary commands.10.0Jan 22, 2001
• CVE-2000-0844Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via functions such as ge...10.0Jan 22, 2001
• CVE-2000-1134Multiple shell programs on various Unix systems, including (1) tcsh, (2) csh, (3) sh, and (4) bash, follow symlinks when processing << redirects (aka here-documents or in-here documents), which all...7.2Dec 19, 2000
• CVE-2000-0594BitchX IRC client does not properly cleanse an untrusted format string, which allows remote attackers to cause a denial of service via an invite to a channel whose name includes special formatting ...5.0Oct 13, 2000
• CVE-2000-0531Linux gpm program allows local users to cause a denial of service by flooding the /dev/gpmctl device with STREAM sockets.2.1Jul 12, 2000