Linux ≫ Linux Kernel

Linux implementations of TFTP would allow access to files outside the restricted directory.

rpc.mountd on Linux, Ultrix, and possibly other operating systems, allows remote attackers to determine the existence of a file on the server by attempting to mount that file, which generates different error messages depending on whether the file exi...

ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts.

Listening TCP ports are sequentially allocated, allowing spoofing attacks.

Denial of service in RPC portmapper allows attackers to register or unregister RPC services or spoof RPC services using a spoofed source IP address such as 127.0.0.1.

The rwho/rwhod service is running, which exposes machine status and user information.

NFS cache poisoning.

Denial of service in syslog by sending it a large number of superfluous messages.

Oversized ICMP ping packets can result in a denial of service, aka Ping o' Death.

The suidperl and sperl program do not give up root privileges when changing UIDs back to the original users, allowing root access.