inn 2.2.3 allows local users to overwrite arbitrary files via a symlink attack in some configurations.
Product
caldera openlinux desktop vulnerabilities
3 published CVES affecting caldera openlinux desktop, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 3
- Critical
- 0
- High
- 1
- Medium
- 1
- Low
- 1
- Unscored
- 0
- CISA KEV
- 0
Latest caldera openlinux desktop CVEs
Newest publication first
-
LowCVSS 1.2 EPSS 0.34%
-
HighCVSS 10.0 EPSS 5.2%
Format string vulnerability in the error logging code of DHCP server and client in Caldera Linux allows remote attackers to execute arbitrary commands.
-
MediumCVSS 5.0 EPSS 9.9%
BitchX IRC client does not properly cleanse an untrusted format string, which allows remote attackers to cause a denial of service via an invite to a channel whose name includes special formatting characters.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.