Open Source Vulnerabilities

cvs, cvs, cvs

lftp, lftp, lftp

screen

screen - integer overflow

mpg321

mpg321 - format string vulnerability

lftp

lftp - buffer overflow

nd

nd - buffer overflows

ethereal

ethereal - buffer overflows

bind

bind - denial of service

libnids

libnids - buffer overflow

apache2

Reported against the mod_php module for Apache 2.0.x, allowing local users with write access to PHP scripts to signal the server process group and reuse its file descriptors. The PHP developers disputed the report ("The opened file descriptors are opened by Apache. It is the job of Apache to protect them ... Not a bug in PHP"), and Red Hat states it "is not a vulnerability" since mod_php runs with the privileges of the httpd child by design. NVD carries the "disputed" tag. mod_php is not shipped by the apache2 source package and is not used in these images. https://security-tracker.debian.org/tracker/CVE-2003-1307

spamassassin, spamassassin, spamassassin

CVE-2003-0956 does not affect BellSoft software

CVE-2003-0959 does not affect BellSoft software

CVE-2003-0986 does not affect BellSoft software

CVE-2003-0249 does not affect BellSoft software

openssh, openssh, openssh

xscreensaver, xscreensaver, xscreensaver

perl, perl, perl

monit, monit, monit

xscreensaver, xscreensaver, xscreensaver

fvwm, fvwm, fvwm

apache2, apache2, apache2

xscreensaver, xscreensaver, xscreensaver

file, file, file

xsok

xsok - missing privilege release

omega-rpg, omega-rpg, omega-rpg

freeradius, freeradius, freeradius

rsync, rsync, rsync

clamav, clamav, clamav

screen, screen, screen

freeradius, freeradius, freeradius

rsync

rsync - heap overflow