Bsdi

39 CVEs across 2 Bsdi products. Browse Bsdi vulnerabilities, severities, and proof-of-concept exploits.

Bsdi products with known CVEs

ProductCVEs
BSD OS38
Gauntlet1
Bsdi CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2008-46092008-10-20The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other operating systems allows re…
CVE-2001-15412001-12-31Buffer overflow in Unix-to-Unix Copy Protocol (UUCP) in BSDI BSD/OS 3.0 through 4.2 allows local users to execute arbitrary code via a long command line argume…
CVE-2001-11542001-08-30Cyrus 2.0.15, 2.0.16, and 1.6.24 on BSDi 4.2, with IMAP enabled, allows remote attackers to cause a denial of service (hang) using PHP IMAP clients.
CVE-2001-11332001-08-21Vulnerability in a system call in BSDI 3.0 and 3.1 allows local users to cause a denial of service (reboot) in the kernel via a particular sequence of instruct…
CVE-2000-11032001-01-09rcvtty in BSD 3.0 and 4.0 does not properly drop privileges before executing a script, which allows local attackers to gain privileges by specifying an alterna…
CVE-1999-00011999-12-30ip_input.c in BSD-derived TCP/IP implementations allows remote attackers to cause a denial of service (crash or hang) via crafted packets.
CVE-1999-10471999-10-18When BSDI patches for Gauntlet 5.0 BSDI are installed in a particular order, Gauntlet allows remote attackers to bypass firewall access restrictions, and does…
CVE-1999-08801999-10-01Denial of service in WU-FTPD via the SITE NEWER command, which does not free memory properly.
CVE-1999-08791999-10-01Buffer overflow in WU-FTPD and related FTP servers allows remote attackers to gain root privileges via macro variables in a message file.
CVE-1999-07041999-09-16Buffer overflow in Berkeley automounter daemon (amd) logging facility provided in the Linux am-utils package and others.
CVE-1999-07471999-08-18Denial of service in BSDi Symmetric Multiprocessing (SMP) when an fstat call is made when the system has a high CPU load.
CVE-1999-07031999-08-03OpenBSD, BSDI, and other Unix operating systems allow users to set chflags and fchflags on character and block devices.
CVE-1999-07981998-12-04Buffer overflow in bootpd on OpenBSD, FreeBSD, and Linux systems via a malformed header type.
CVE-1999-0052High7.51998-11-04IP fragmentation denial of service in FreeBSD allows a remote attacker to cause a crash.
CVE-1999-00021998-10-12Buffer overflow in NFS mountd gives root access to remote attackers, mostly in Linux systems.
CVE-1999-00091998-04-08Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases.
CVE-1999-03231998-02-20FreeBSD mmap function allows users to modify append-only or immutable files.
CVE-1999-03051998-02-01The system configuration control (sysctl) facility in BSD based operating systems OpenBSD 2.2 and earlier, and FreeBSD 2.2.5 and earlier, does not properly res…
CVE-1999-03041998-02-01mmap function in BSD allows local attackers in the kmem group to modify memory through devices.
CVE-1999-00611997-10-02File creation and deletion, and remote execution, in the BSD line printer daemon (lpd).
CVE-1999-00241997-08-13DNS cache poisoning via BIND, by predictable query IDs.
CVE-1999-00341997-05-29Buffer overflow in suidperl (sperl), Perl 4.x and 5.x.
CVE-1999-00401997-05-01Buffer overflow in Xt library of X Windowing System allows local users to execute commands with root privileges.
CVE-1999-0038High8.41997-04-26Buffer overflow in xlock program allows local users to execute commands as root.
CVE-1999-00421997-04-07Buffer overflow in University of Washington's implementation of IMAP and POP servers.
CVE-1999-01651997-03-01NFS cache poisoning.
CVE-1999-00461997-02-06Buffer overflow of rlogin program using TERM environmental variable.
CVE-1999-00471997-01-28MIME conversion buffer overflow in sendmail versions 8.8.3 and 8.8.4.
CVE-1999-02971996-12-12Buffer overflow in Vixie Cron library up to version 3.0 allows local users to obtain root access via a long environmental variable.
CVE-1999-00961996-12-10Sendmail decode alias can be used to overwrite sensitive files.
CVE-1999-0043Critical9.81996-12-04Command execution via shell metachars in INN daemon (innd) 1.5 using "newgroup" and "rmgroup" control messages, and others.
CVE-1999-01291996-12-03Sendmail allows local users to write to a file and gain group permissions via a .forward or :include: file.
CVE-1999-01301996-11-16Local users can start Sendmail in daemon mode and gain root privileges.
CVE-1999-00321996-10-25Buffer overflow in lpr, as used in BSD-based systems including Linux, allows local users to execute arbitrary code as root via a long -C (classification) comma…
CVE-1999-01311996-09-11Buffer overflow and denial of service in Sendmail 8.7.5 and earlier through GECOS field gives root access to local users.
CVE-1999-00231996-07-24Local user gains root privileges via buffer overflow in rdist, via lookup() function.
CVE-1999-0022High7.81996-07-03Local user gains root privileges via buffer overflow in rdist, via expstr() function.
CVE-1999-00781996-04-18pcnfsd (aka rpc.pcnfsd) allows local users to change file permissions, or execute arbitrary commands through arguments in the RPC call.
CVE-1999-00991995-10-19Buffer overflow in syslog utility allows local or remote attackers to gain root privileges.