Open Source Vulnerabilities

apache2, apache2, apache2

CVE-2002-1592 does not affect BellSoft software

efax

CVE-2002-0129 affecting package efax 0.9a-34

efax

CVE-2002-0130 affecting package efax 0.9a-34

efax

CVE-2002-0129 affecting package efax 0.9a-34

efax

CVE-2002-0130 affecting package efax 0.9a-34

tinc, tinc, tinc

openssh, openssh, openssh

nvi, nvi, nvi

vanessa-logger, vanessa-logger, vanessa-logger

apache2, apache2, apache2

util-linux, util-linux, util-linux

apache2

mod_usertrack in Apache 1.3.11 through 1.3.20 generates predictable session IDs (host IP, system time, PID), which "allows local users to obtain session IDs and bypass authentication when these session IDs are used for authentication". Red Hat states "This is not a security issue. The mod_usertrack cookies are not designed to be used for authentication." NVD affected range is 1.3.11-1.3.20, far below the shipped 2.4.68. Debian: unimportant. https://security-tracker.debian.org/tracker/CVE-2001-1534

xli, xli, xli

cfingerd, cfingerd, cfingerd

hylafax, hylafax, hylafax

CVE-2001-0328 does not affect BellSoft software

openssh, openssh, openssh

inn2, inn2, inn2

openssh, openssh, openssh

gcc-3.3

FTP Server Response Buffer Overflow

CVE-2000-0506 does not affect BellSoft software

CVE-2000-0344 does not affect BellSoft software

lpr, lpr, lpr

lpr, lpr, lpr

gzip, gzip, gzip

strace

CVE-2000-0006 affecting package strace 6.8-1

ypserv

CVE-1999-0902 affecting package ypserv 4.1-4

ypserv

CVE-1999-0901 affecting package ypserv 4.1-4

ypserv

CVE-1999-0902 affecting package ypserv 4.2-12

ypserv

CVE-1999-0901 affecting package ypserv 4.2-12