Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown

CVE-2022-21950

Disclosure Date: August 04, 2022 (last updated October 08, 2023)
A Improper Access Control vulnerability in the systemd service of cana in openSUSE Backports SLE-15-SP3, openSUSE Backports SLE-15-SP4 allows local users to hijack the UNIX domain socket This issue affects: openSUSE Backports SLE-15-SP3 canna versions prior to canna-3.7p3-bp153.2.3.1. openSUSE Backports SLE-15-SP4 canna versions prior to 3.7p3-bp154.3.3.1. openSUSE Factory was also affected. Instead of fixing the package it was deleted there.
Attack Vector: LocalPrivileges: LowUser Interaction: None
0
0
Attacker Value
Unknown

CVE-2002-1159

Disclosure Date: December 18, 2002 (last updated February 22, 2025)
Canna 3.6 and earlier does not properly validate requests, which allows remote attackers to cause a denial of service or information leak.
0
0
Attacker Value
Unknown

CVE-2002-1158

Disclosure Date: December 18, 2002 (last updated February 22, 2025)
Buffer overflow in the irw_through function for Canna 3.5b2 and earlier allows local users to execute arbitrary code as the bin user.
0
0