Mandrakesoft Mandrake Multi Network Firewall — known CVE vulnerabilities

Every CVE whose affected-product data names Mandrakesoft Mandrake Multi Network Firewall, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (16)

• CVE-2003-0041 — CVSS 10.0 (critical): Kerberos FTP client allows remote FTP sites to execute arbitrary code via a pipe (|) character in a filename that is retrieved by the…
• CVE-2007-1351 — CVSS 8.5 (high): Integer overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont before 20070403 and (2) freetype 2.3.2 and earlier…
• CVE-2007-5116 — CVSS 7.5 (high): Buffer overflow in the polymorphic opcode support in the Regular Expression Engine (regcomp.c) in Perl 5.8 allows context-dependent…
• CVE-2004-0834 — CVSS 7.2 (high): Format string vulnerability in Speedtouch USB driver before 1.3.1 allows local users to execute arbitrary code via (1) modem_run, (2)…
• CVE-2004-1051 — CVSS 7.2 (high): sudo before 1.6.8p2 allows local users to execute arbitrary commands by using "()" style environment variables to create functions that…
• CVE-2004-0496 — CVSS 7.2 (high): Multiple unknown vulnerabilities in Linux kernel 2.6 allow local users to gain privileges or access kernel memory, a different set of…
• CVE-2004-1235 — CVSS 6.2 (medium): Race condition in the (1) load_elf_library and (2) binfmt_aout function calls for uselib in Linux kernel 2.4 through 2.429-rc2 and 2.6…
• CVE-2007-1352 — CVSS 3.8 (low): Integer overflow in the FontFileInitTable function in X.Org libXfont before 20070403 allows remote authenticated users to execute arbitrary…
• CVE-2004-2395 — CVSS 2.1 (low): Memory leak in passwd 0.68 allows local users to cause a denial of service (memory consumption) via a large number of failed read attempts…
• CVE-2005-0003 — CVSS 2.1 (low): The 64 bit ELF support in Linux kernel 2.6 before 2.6.10, on 64-bit architectures, does not properly check for overlapping VMA (virtual…
• CVE-2004-0497 — CVSS 2.1 (low): Unknown vulnerability in Linux kernel 2.x may allow local users to modify the group ID of files, such as NFS exported files in kernel 2.4.
• CVE-2004-0535 — CVSS 2.1 (low): The e1000 driver for Linux kernel 2.4.26 and earlier does not properly initialize memory before using it, which allows local users to read…
• CVE-2004-0565 — CVSS 2.1 (low): Floating point information leak in the context switch code for Linux 2.4.x only checks the MFH bit but does not verify the FPH owner, which…
• CVE-2004-0975 — CVSS 2.1 (low): The der_chop script in the openssl package in Trustix Secure Linux 1.5 through 2.1 and other operating systems allows local users to…
• CVE-2004-2394 — CVSS 2.1 (low): Off-by-one error in passwd 0.68 and earlier, when using the --stdin option, causes passwd to use the first 78 characters of a password…
• CVE-2003-0462 — CVSS 1.2 (low): A race condition in the way env_start and env_end pointers are initialized in the execve system call and used in fs/proc/base.c on Linux…