📦

secure_linux

Vendor: trustix

Login to add this product to WatchStack
Actively Exploited 0 CISA KEV List
PoC / Exploits 6 Code Available
Total RCEs 3 Remote Access
Total CVEs 34 Total Indexed
Avg. EPSS 2.66% Exploit Prob.
Latest CVE CVE-2005-0001 May 02

Security Vulnerability Index

Page 2 / 4
2.1 CVSS
CVE-2004-0415
Exploit Found

Linux kernel does not properly convert 64-bit file offset pointers to 32 bits, which allows local users to access portions of kernel memory.

EPSS: 0.77%
2.1 CVSS
CVE-2002-1319

The Linux kernel 2.4.20 and earlier, and 2.5.x, when running on x86 systems, allows local users to cause a denial of service (hang) via the emulation mode, which does not properly clear TF and NT EFLAGs.

EPSS: 0.37%
2.1 CVSS
CVE-2001-0169
Exploit Found

When using the LD_PRELOAD environmental variable in SUID or SGID applications, glibc does not verify that preloaded libraries in /etc/ld.so.cache are also SUID/SGID, which could allow a local user to overwrite arbitrary files by loading a library from /lib or /usr/lib.

EPSS: 0.86%
7.2 CVSS
CVE-2000-1009
Exploit Found

dump in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which allows local users to obtain root privileges by modifying the RSH variable to point to a Trojan horse program.

EPSS: 1.15%
7.2 CVSS
CVE-2000-0867

Kernel logging daemon (klogd) in Linux does not properly cleanse user-injected format strings, which allows local users to gain root privileges by triggering malformed kernel messages.

EPSS: 0.41%
4.6 CVSS
CVE-2000-0791

Trustix installs the httpsd program for Apache-SSL with world-writeable permissions, which allows local users to replace it with a Trojan horse.

EPSS: 0.32%
10.0 CVSS
CVE-2000-0666
Exploit Found

rpc.statd in the nfs-utils package in various Linux distributions does not properly cleanse untrusted format strings, which allows remote attackers to gain root privileges.

EPSS: 26.32%