Secure Linux

Vendor:

First CVE: Jul 16, 2000 · Active for 26 years

66

Total CVEs

More Total CVEs than 98% of tracked products

11.0

Avg CVEs / Year

Higher CVE frequency than 96% of tracked products

6.5

Avg CVSS

Higher Avg CVSS than 28% of tracked products

0.0%

KEV Rate

Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Secure Linux over time

Volume of CVEsAvg CVSS Base Score

First CVE

Jul 16, 2000

26 years ago

Most Recent CVE

Feb 13, 2007

7,101 days ago

CVE Severity & Scoring

Secure Linux66 CVEs

20%

30%

48%

All CVEs352,294 CVEs

45%

40%

11%

LowMediumHighCritical

Attack Vector

Local1 (1.5%)

Network1 (1.5%)

Unknown64 (97.0%)

Physical0 (0.0%)

Adjacent Network0 (0.0%)

Attack Complexity

Low2 (3.0%)

High0 (0.0%)

Unknown64 (97.0%)

User Interaction

None2 (3.0%)

Unknown64 (97.0%)

Required0 (0.0%)

Privileges Required

Low1 (1.5%)

High0 (0.0%)

None1 (1.5%)

Unknown64 (97.0%)

Top CVEs

Signals from CVEs in this product scope (66 CVEs).

66 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-2000-0917HIGH Format string vulnerability in use_syslog() function in LPRng 3.6.24 allows remote attackers to execute arbitrary commands.	Dec 19, 2000	10.0	84	NO	YES
CVE-2004-0493MEDIUM The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service (memory exhaustion), and possibly an integer signedness error lead	Aug 6, 2004	6.4	72	NO	YES
CVE-2004-0595MEDIUM The strip_tags function in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, does not filter null (\0) characters within tag names when restricting input to allowed tags, which allows d	Jul 27, 2004	6.8	54	NO	YES
CVE-2000-0666HIGH rpc.statd in the nfs-utils package in various Linux distributions does not properly cleanse untrusted format strings, which allows remote attackers to gain root privileges.	Jul 16, 2000	10.0	52	NO	YES
CVE-2004-0594MEDIUM The memory_limit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain conditions such as when register_globals is enabled, allows remote attackers to execute	Jul 27, 2004	5.1	51	NO	YES
CVE-2004-0600HIGH Buffer overflow in the Samba Web Administration Tool (SWAT) in Samba 3.0.2 to 3.0.4 allows remote attackers to execute arbitrary code via an invalid base-64 character during HTTP b	Jul 27, 2004	10.0	51	NO	YES
CVE-2004-0990HIGH Integer overflow in GD Graphics Library libgd 2.0.28 (libgd2), and possibly other versions, allows remote attackers to cause a denial of service and possibly execute arbitrary code	Mar 1, 2005	10.0	50	NO	YES
CVE-2004-0989HIGH Multiple buffer overflows in libXML 2.6.12 and 2.6.13 (libxml2), and possibly other versions, may allow remote attackers to execute arbitrary code via (1) a long FTP URL that is no	Mar 1, 2005	10.0	49	NO	YES
CVE-2002-0083CRITICAL Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious servers to gain privileges.	Mar 15, 2002	9.8	48	NO	YES
CVE-2004-1304HIGH Stack-based buffer overflow in the ELF header parsing code in file before 4.12 allows attackers to execute arbitrary code via a crafted ELF file.	Jan 10, 2005	10.0	47	NO	YES

View all 66 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (66 CVEs).

CISA KEV

0 CVEs

0.0% of CVEs· Bottom 1%

Metasploit

1 CVE

1.5% of CVEs· 96th percentile

Nuclei

0 CVEs

0.0% of CVEs· Bottom 1%

ExploitDB

22 CVEs

33.3% of CVEs· 90th percentile

Social Chatter

Signals from CVEs in this product scope (66 CVEs).

Media Mentions

Signals from CVEs in this product scope (66 CVEs).

Top CNAs Publishing CVEs For Secure Linux

Top CWEs

Versions

Version	CVE Count	Avg CVSS	Avg EPSS	Exploits
3.0	8	7.2	3.3%	0
2.2	29	7.4	5.4%	5
2.1	42	6.6	10.8%	13
2.0	45	6.5	10.2%	14
2	4	4.0	1.4%	1
1.5	23	6.5	14.1%	10
1.2	6	4.0	3.1%	2
1.1	12	6.1	11.7%	6
1.01	1	7.5	2.0%	0
1.0	3	10.0	40.1%	3