Open Source Vulnerabilities

apache2

mod_usertrack in Apache 1.3.11 through 1.3.20 generates predictable session IDs (host IP, system time, PID), which "allows local users to obtain session IDs and bypass authentication when these session IDs are used for authentication". Red Hat states "This is not a security issue. The mod_usertrack cookies are not designed to be used for authentication." NVD affected range is 1.3.11-1.3.20, far below the shipped 2.4.68. Debian: unimportant. https://security-tracker.debian.org/tracker/CVE-2001-1534

cfingerd, cfingerd, cfingerd

xli, xli, xli

hylafax, hylafax, hylafax

CVE-2001-0328 does not affect BellSoft software

openssh, openssh, openssh

inn2, inn2, inn2

openssh, openssh, openssh

gcc-3.3

FTP Server Response Buffer Overflow

CVE-2000-0506 does not affect BellSoft software

CVE-2000-0344 does not affect BellSoft software

lpr, lpr, lpr

lpr, lpr, lpr

gzip, gzip, gzip

strace

CVE-2000-0006 affecting package strace 6.8-1

ypserv

CVE-1999-0901 affecting package ypserv 4.2-12

ypserv

CVE-1999-0902 affecting package ypserv 4.2-12

ypserv

CVE-1999-0901 affecting package ypserv 4.1-4

ypserv

CVE-1999-0902 affecting package ypserv 4.1-4

squid, squid, squid

procmail

CVE-1999-0475 affecting package procmail 3.24-8

procmail

CVE-1999-0475 affecting package procmail 3.22-53

kernel

CVE-1999-0656 affecting package kernel for versions less than 6.6.35.1-4

kernel

CVE-1999-0656 affecting package kernel for versions less than 5.10.78.1-1

kernel

CVE-1999-0524 affecting package kernel for versions less than 5.10.78.1-1

finger

CVE-1999-0150 affecting package finger for versions less than 0.17-4

finger

CVE-1999-0612 affecting package finger for versions less than 0.17-4

sendmail

CVE-1999-0163 affecting package sendmail 8.15.2-46

cpio, cpio, cpio

sendmail

CVE-1999-0145 affecting package sendmail 8.15.2-46

telnet

CVE-1999-1090 affecting package telnet 0.17-81

telnet

CVE-1999-1090 affecting package telnet 0.17-81

linux, linux

mumble, mumble, mumble