Caldera vulnerabilitiesNone on the known-exploited list.
Caldera has 82 published vulnerabilities across 16 products in our catalogue. None of them is on the list of flaws known to be exploited today. The most affected product is Openlinux, with 36. If you run Caldera software, patch the exploited flaws first.
We keep watching the known-exploited list.
Which Caldera products have the most vulnerabilities?
Openlinux leads with 36 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.
Which Caldera vulnerabilities are being exploited?
This is the list that matters most: flaws criminals are using now.
None of Caldera's published vulnerabilities is on the list of flaws known to be exploited today. We keep watching that list.
Which Caldera flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- 79%CVE-2000-0917Critical
Format string vulnerability in use_syslog() function in LPRng 3.6.24 allows remote attackers to execute arbitrary commands.
- 45%CVE-1999-0043Critical
Command execution via shell metachars in INN daemon (innd) 1.5 using "newgroup" and "rmgroup" control messages, and others.
- 40%CVE-1999-0368Critical
Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a.
- 29%CVE-1999-0009Critical
Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases.
- 28%CVE-1999-0002Critical
Buffer overflow in NFS mountd gives root access to remote attackers, mostly in Linux systems.
- 23%CVE-2002-0679Critical
Buffer overflow in Common Desktop Environment (CDE) ToolTalk RPC database server (rpc.ttdbserverd) allows remote attackers to execute arbitrary code via an argument to the _TT_CREATE_FILE procedure.
- 18%CVE-2000-0491Critical
Buffer overflow in the XDMCP parsing code of GNOME gdm, KDE kdm, and wdm allows remote attackers to execute arbitrary commands or cause a denial of service via a long FORWARD_QUERY request.
- 16%CVE-2000-0844Critical
Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via functions such as gettext and catopen.
- 13%CVE-1999-0042Critical
Buffer overflow in University of Washington's implementation of IMAP and POP servers.
- 9.9%CVE-2000-0594Medium
BitchX IRC client does not properly cleanse an untrusted format string, which allows remote attackers to cause a denial of service via an invite to a channel whose name includes special formatting characters.
All Caldera products we track.
16 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.
- Openlinuxopenlinux36 vulnerabilities10 versions
- Unixwareunixware20 vulnerabilities5 versions
- Openunixopenunix17 vulnerabilities1 version
- Openlinux Eserveropenlinux_eserver10 vulnerabilities3 versions
- Openlinux Edesktopopenlinux_edesktop8 vulnerabilities2 versions
- Openlinux Serveropenlinux_server8 vulnerabilities2 versions
- Openlinux Workstationopenlinux_workstation8 vulnerabilities2 versions
- Openserveropenserver5 vulnerabilities3 versions
- Calderacaldera4 vulnerabilities3 versions
- Openlinux Desktopopenlinux_desktop3 vulnerabilities1 version
- Openlinux Ebuilderopenlinux_ebuilder3 vulnerabilities2 versions
- Coascoas1 vulnerability3 versions
- Network Desktopnetwork_desktop1 vulnerability1 version
- Openlinux Liteopenlinux_lite1 vulnerability1 version
- Volutionvolution1 vulnerability3 versions
- Volution Managervolution_manager1 vulnerability1 version
Running Caldera? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 new flaw affects software Acme tracks
Format string vulnerability in use_syslog() function in LPRng 3.6.24 allows remote attackers to execute arbitrary commands.
- Matched to
- Caldera on Acme's software list
- What to do
- Plan in the vendor’s update
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
Our catalogue lists 82 published vulnerabilities across 16 products and 43 versions from Caldera.
None of Caldera's vulnerabilities is on the list of flaws known to be exploited today.
Openlinux, with 36 published vulnerabilities. Its own page lists the ones known to be exploited.
Create a Precursor Intelligence account and track the Caldera products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.