VendorsTarantellatarantella_enterprise3.20
Vulnerabilities

Tarantella Tarantella Enterprise 3.20

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

5CVEs
CVE-2004-0079
The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.
Published 2004-03-18 · Modified
7.5EPSS 0.095
CVE-2004-0112
The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that causes an out-of-bounds read.
Published 2004-03-18 · Modified
5.0EPSS 0.104
CVE-2004-0081
OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test Tool.
Published 2004-03-18 · Modified
5.0EPSS 0.072
CVE-2002-0203
ttawebtop.cgi in Tarantella Enterprise 3.20 on SPARC Solaris and Linux, and 3.1x and 3.0x including 3.11.903, allows remote attackers to view directory contents via an empty pg parameter.
Published 2002-05-03 · Modified
5.0EPSS 0.019
CVE-2002-0296
The installation of Tarantella Enterprise 3 allows local users to overwrite arbitrary files via a symlink attack on the "spinning" temporary file.
Published 2002-05-03 · Modified
1.21 PoCEPSS 0.007