Vulnerabilities of Linux Mandrake
Linux Mandrake vulnerability: denial of service of ping
A server can send a malicious ICMP reply, in order to generate an infinite loop in the ping tool.

Linux Mandrake vulnerability: memory corruptions
An attacker can create a malicious font in order to execute code on computers of FreeType users.

Linux Mandrake vulnerability: double free of SplObjectStorage
When a PHP application unserializes malicious SplObjectStorage data, a double memory free occurs, and can lead to code execution.

Linux Mandrake vulnerability: buffer overflow of chain_reply
An unauthenticated attacker can send a malicious SMB query, in order to generate a buffer overflow in Samba, leading to a denial of service or to code execution.

Linux Mandrake vulnerability: bypassing secure path
When sudo calls some programs, a local attacker can bypass the "secure path" feature, in order to elevate his privileges.

Display other vulnerabilities of Linux Mandrake described by Vigil@nce...

Display information about Linux Mandrake:

• http://www2.mandriva.com/fr/linux/overview/