FreeBSD
Page 6 of 7 — FreeBSD CVEs from a corpus of 635, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2002-0754 | | 2002-08-12 | Kerberos 5 su (k5su) in FreeBSD 4.4 and earlier relies on the getlogin system call to determine if the user running k5su is root, which could allow a root-init… | |
CVE-2002-0518 | | 2002-08-12 | The SYN cache (syncache) and SYN cookie (syncookie) mechanism in FreeBSD 4.5 and earlier allows remote attackers to cause a denial of service (crash) (1) via a… | |
CVE-2002-0414 | | 2002-08-12 | KAME-derived implementations of IPsec on NetBSD 1.5.2, FreeBSD 4.5, and other operating systems, does not properly consult the Security Policy Database (SPD)… | |
CVE-2002-0391 | Critical | 9.8 | 2002-08-12 | Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including dietlibc, allows remo… |
CVE-2002-0701 | | 2002-07-23 | ktrace in BSD-based operating systems allows the owner of a process with special privileges to trace the process after its privileges have been lowered, which… | |
CVE-2002-0574 | | 2002-07-03 | Memory leak in FreeBSD 4.5 and earlier allows remote attackers to cause a denial of service (memory exhaustion) via ICMP echo packets that trigger a bug in ip_… | |
CVE-2002-0572 | | 2002-07-03 | FreeBSD 4.5 and earlier, and possibly other BSD-based operating systems, allows local users to write to or read from restricted files by closing the file descr… | |
CVE-2002-0381 | | 2002-06-25 | The TCP implementation in various BSD operating systems (tcp_input.c) does not properly block connections to broadcast addresses, which could allow remote atta… | |
CVE-2002-0062 | | 2002-03-08 | Buffer overflow in ncurses 5.0, and the ncurses4 compatibility package as used in Red Hat Linux, allows local users to gain privileges, related to "routines fo… | |
CVE-2002-0004 | | 2002-02-27 | Heap corruption vulnerability in the "at" program allows local users to execute arbitrary code via a malformed execution time, which causes at to free the same… | |
CVE-2001-1185 | | 2001-12-10 | Some AIO operations in FreeBSD 4.4 may be delayed until after a call to execve, which could allow a local user to overwrite memory of the new process and gain… | |
CVE-2001-0796 | | 2001-12-06 | SGI IRIX 6.5 through 6.5.12f and possibly earlier versions, and FreeBSD 3.0, allows remote attackers to cause a denial of service via a malformed IGMP multicas… | |
CVE-2001-0670 | | 2001-10-03 | Buffer overflow in BSD line printer daemon (in.lpd or lpd) in various BSD-based operating systems allows remote attackers to execute arbitrary code via an inco… | |
CVE-2001-1034 | | 2001-09-23 | Format string vulnerability in Hylafax on FreeBSD allows local users to execute arbitrary code via format specifiers in the -h hostname argument for (1) faxrm… | |
CVE-2001-1029 | | 2001-09-20 | libutil in OpenSSH on FreeBSD 4.4 and earlier does not drop privileges before verifying the capabilities for reading the copyright and welcome files, which all… | |
CVE-2001-0710 | | 2001-09-20 | NetBSD 1.5 and earlier and FreeBSD 4.3 and earlier allows a remote attacker to cause a denial of service by sending a large number of IP fragments to the machi… | |
CVE-2001-1017 | | 2001-09-04 | rmuser utility in FreeBSD 4.2 and 4.3 creates a copy of the master.passwd file with world-readable permissions while updating the original file, which could al… | |
CVE-2001-0969 | | 2001-08-31 | ipfw in FreeBSD does not properly handle the use of "me" in its rules when point to point interfaces are used, which causes ipfw to allow connections from arbi… | |
CVE-2001-1155 | Critical | 9.8 | 2001-08-23 | TCP Wrappers (tcp_wrappers) in FreeBSD 4.1.1 through 4.3 with the PARANOID ACL option enabled does not properly check the result of a reverse DNS lookup, which… |
CVE-2001-1166 | | 2001-08-21 | linprocfs on FreeBSD 4.3 and earlier does not properly restrict access to kernel memory, which allows one process with debugging rights on a privileged process… | |
CVE-2001-1145 | | 2001-08-17 | fts routines in FreeBSD 4.3 and earlier, NetBSD before 1.5.2, and OpenBSD 2.9 and earlier can be forced to change (chdir) into a different directory than inten… | |
CVE-2001-0554 | | 2001-08-14 | Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a set of options incl… | |
CVE-2001-1180 | | 2001-07-10 | FreeBSD 4.3 does not properly clear shared signal handlers when executing a process, which allows local users to gain privileges by calling rfork with a shared… | |
CVE-2001-1244 | | 2001-07-07 | Multiple TCP implementations could allow remote attackers to cause a denial of service (bandwidth and CPU exhaustion) by setting the maximum segment size (MSS)… | |
CVE-2001-0439 | | 2001-07-02 | licq before 1.0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in a URL. | |
CVE-2001-0424 | | 2001-07-02 | BubbleMon 1.31 does not properly drop group privileges before executing programs, which allows local users to execute arbitrary commands with the kmem group id. | |
CVE-2001-0469 | | 2001-06-27 | rwho daemon rwhod in FreeBSD 4.2 and earlier, and possibly other operating systems, allows remote attackers to cause a denial of service via malformed packets… | |
CVE-2001-0388 | | 2001-06-27 | time server daemon timed allows remote attackers to cause a denial of service via malformed packets. | |
CVE-2001-0402 | | 2001-06-18 | IPFilter 3.4.16 and earlier does not include sufficient session information in its cache, which allows remote attackers to bypass access restrictions by sendin… | |
CVE-2001-0371 | | 2001-06-18 | Race condition in the UFS and EXT2FS file systems in FreeBSD 4.2 and earlier, and possibly other operating systems, makes deleted data available to user proces… | |
CVE-2001-0247 | | 2001-06-18 | Buffer overflows in BSD-based FTP servers allows remote attackers to execute arbitrary commands via a long pattern string containing a {} sequence, as seen in… | |
CVE-2001-0310 | | 2001-06-02 | sort in FreeBSD 4.1.1 and earlier, and possibly other operating systems, uses predictable temporary file names and does not properly handle when the temporary… | |
CVE-2001-0230 | | 2001-06-02 | Buffer overflow in dc20ctrl before 0.4_1 in FreeBSD, and possibly other operating systems, allows local users to gain privileges. | |
CVE-2001-0221 | | 2001-06-02 | Buffer overflow in ja-xklock 2.7.1 and earlier allows local users to gain root privileges. | |
CVE-2001-0196 | | 2001-05-03 | inetd ident server in FreeBSD 4.x and earlier does not properly set group permissions, which allows remote attackers to read the first 16 bytes of files that a… | |
CVE-2001-0183 | | 2001-03-26 | ipfw and ip6fw in FreeBSD 4.2 and earlier allows remote attackers to bypass access restrictions by setting the ECE flag in a TCP packet, which makes the packet… | |
CVE-2001-0128 | | 2001-03-12 | Zope before 2.2.4 does not properly compute local roles, which could allow users to bypass specified access restrictions and gain privileges. | |
CVE-2000-0375 | | 2001-03-12 | The kernel in FreeBSD 3.2 follows symbolic links when it creates core dump files, which allows local attackers to modify arbitrary files. | |
CVE-2000-0890 | | 2001-02-16 | periodic in FreeBSD 4.1.1 and earlier, and possibly other operating systems, allows local users to overwrite arbitrary files via a symlink attack. | |
CVE-2001-0094 | | 2001-02-12 | Buffer overflow in kdc_reply_cipher of libkrb (Kerberos 4 authentication library) in NetBSD 1.5 and FreeBSD 4.2 and earlier, as used in Kerberised applications… | |
CVE-2001-0093 | | 2001-02-12 | Vulnerability in telnetd in FreeBSD 1.5 allows local users to gain root privileges by modifying critical environmental variables that affect the behavior of te… | |
CVE-2001-0063 | | 2001-02-12 | procfs in FreeBSD and possibly other operating systems allows local users to bypass access control restrictions for a jail environment and gain additional priv… | |
CVE-2001-0062 | | 2001-02-12 | procfs in FreeBSD and possibly other operating systems allows local users to cause a denial of service by calling mmap on the process' own mem file, which caus… | |
CVE-2001-0061 | | 2001-02-12 | procfs in FreeBSD and possibly other operating systems does not properly restrict access to per-process mem and ctl files, which allows local users to gain roo… | |
CVE-2000-1184 | | 2001-01-09 | telnetd in FreeBSD 4.2 and earlier, and possibly other operating systems, allows remote attackers to cause a denial of service by specifying an arbitrary large… | |
CVE-2000-1167 | | 2001-01-09 | ppp utility in FreeBSD 4.1.1 and earlier does not properly restrict access as specified by the "nat deny_incoming" command, which allows remote attackers to co… | |
CVE-2000-0993 | | 2000-12-19 | Format string vulnerability in pw_error function in BSD libutil library allows local users to gain root privileges via a malformed password in commands such as… | |
CVE-2000-0963 | | 2000-12-19 | Buffer overflow in ncurses library allows local users to execute arbitrary commands via long environmental information such as TERM or TERMINFO_DIRS. | |
CVE-2000-0916 | | 2000-12-19 | FreeBSD 4.1.1 and earlier, and possibly other BSD-based OSes, uses an insufficient random number generator to generate initial TCP sequence numbers (ISN), whic… | |
CVE-2000-0915 | | 2000-12-19 | fingerd in FreeBSD 4.1.1 allows remote attackers to read arbitrary files by specifying the target file name instead of a regular user name. | |
CVE-2000-1066 | | 2000-12-11 | The getnameinfo function in FreeBSD 4.1.1 and earlier, and possibly other operating systems, allows a remote attacker to cause a denial of service via a long D… | |
CVE-2000-1013 | | 2000-12-11 | The setlocale function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to read arbitrary files via the LANG environmental variable. | |
CVE-2000-1012 | | 2000-12-11 | The catopen function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to read arbitrary files via the LANG environmental variable. | |
CVE-2000-1011 | | 2000-12-11 | Buffer overflow in catopen() function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to gain root privileges via a long environmental… | |
CVE-2000-0998 | | 2000-12-11 | Format string vulnerability in top program allows local attackers to gain root privileges via the "kill" or "renice" function. | |
CVE-2000-0852 | | 2000-11-14 | Multiple buffer overflows in eject on FreeBSD and possibly other OSes allows local users to gain root privileges. | |
CVE-2000-0752 | | 2000-10-20 | Buffer overflows in brouted in FreeBSD and possibly other OSes allows local users to gain root privileges via long command line arguments. | |
CVE-2000-0749 | | 2000-10-20 | Buffer overflow in the Linux binary compatibility module in FreeBSD 3.x through 5.x allows local users to gain root privileges via long filenames in the linux… | |
CVE-2000-0729 | | 2000-10-20 | FreeBSD 5.x, 4.x, and 3.x allows local users to cause a denial of service by executing a program with a malformed ELF image header. | |
CVE-1999-0761 | | 2000-09-16 | Buffer overflow in FreeBSD fts library routines allows local user to modify arbitrary files via the periodic program. | |
CVE-2000-0595 | | 2000-07-05 | libedit searches for the .editrc file in the current directory instead of the user's home directory, which may allow local users to execute arbitrary commands… | |
CVE-2000-0594 | | 2000-07-04 | BitchX IRC client does not properly cleanse an untrusted format string, which allows remote attackers to cause a denial of service via an invite to a channel w… | |
CVE-2000-0584 | | 2000-07-02 | Buffer overflow in Canna input system allows remote attackers to execute arbitrary commands via an SR_INIT command with a long user name or group name. | |
CVE-2000-0535 | | 2000-06-12 | OpenSSL 0.9.4 and OpenSSH for FreeBSD do not properly check for the existence of the /dev/random or /dev/urandom devices, which are absent on FreeBSD Alpha sys… | |
CVE-2000-0532 | | 2000-06-07 | A FreeBSD patch for SSH on 2000-01-14 configures ssh to listen on port 722 as well as port 22, which might allow remote attackers to access SSH through port 72… | |
CVE-2000-0461 | | 2000-05-29 | The undocumented semconfig system call in BSD freezes the state of semaphores, which allows local users to cause a denial of service of the semaphore system by… | |
CVE-1999-1008 | | 2000-05-17 | xsoldier program allows local users to gain root access via a long argument. | |
CVE-2000-0440 | | 2000-05-01 | NetBSD 1.4.2 and earlier allows remote attackers to cause a denial of service by sending a packet with an unaligned IP timestamp option. | |
CVE-2000-0235 | | 2000-03-27 | Buffer overflow in the huh program in the orville-write package allows local users to gain root privileges. | |
CVE-2000-0186 | | 2000-02-28 | Buffer overflow in the dump utility in the Linux ext2fs backup package allows local users to gain privileges via a long command line argument. | |
CVE-2000-0163 | | 2000-02-21 | asmon and ascpu in FreeBSD allow local users to gain root privileges via a configuration file. | |
CVE-2000-0092 | | 2000-01-19 | The BSD make program allows local users to modify files via a symlink attack when the -j option is being used. | |
CVE-1999-0964 | | 2000-01-01 | Buffer overflow in FreeBSD setlocale in the libc module allows attackers to execute arbitrary code via a long PATH_LOCALE environment variable. | |
CVE-1999-1339 | | 1999-12-31 | Vulnerability when Network Address Translation (NAT) is enabled in Linux 2.2.10 and earlier with ipchains, or FreeBSD 3.2 with ipfw, allows remote attackers to… | |
CVE-1999-0001 | | 1999-12-30 | ip_input.c in BSD-derived TCP/IP implementations allows remote attackers to cause a denial of service (crash or hang) via crafted packets. | |
CVE-1999-0963 | | 1999-12-01 | FreeBSD mount_union command allows local users to gain root privileges via a symlink attack. | |
CVE-1999-0857 | | 1999-12-01 | FreeBSD gdc program allows local users to modify files via a symlink attack. | |
CVE-1999-0855 | | 1999-12-01 | Buffer overflow in FreeBSD gdc program. | |
CVE-1999-0826 | | 1999-12-01 | Buffer overflow in FreeBSD angband allows local users to gain privileges. | |
CVE-1999-0823 | | 1999-12-01 | Buffer overflow in FreeBSD xmindpath allows local users to gain privileges via -f argument. | |
CVE-1999-0820 | | 1999-12-01 | FreeBSD seyon allows users to gain privileges via a modified PATH variable for finding the xterm and seyon-emu commands. | |
CVE-1999-0863 | | 1999-11-08 | Buffer overflow in FreeBSD seyon via HOME environmental variable, -emulator argument, -modems argument, or the GUI. | |
CVE-1999-0821 | | 1999-11-08 | FreeBSD seyon allows local users to gain privileges by providing a malicious program in the -emulator argument. | |
CVE-1999-1517 | | 1999-11-01 | runtar in the Amanda backup system used in various UNIX operating systems executes tar with root privileges, which allows a user to overwrite or read arbitrary… | |
CVE-1999-0912 | | 1999-09-22 | FreeBSD VFS cache (vfs_cache) allows local users to cause a denial of service by opening a large number of files. | |
CVE-1999-0704 | | 1999-09-16 | Buffer overflow in Berkeley automounter daemon (amd) logging facility provided in the Linux am-utils package and others. | |
CVE-2000-0489 | | 1999-09-05 | FreeBSD, NetBSD, and OpenBSD allow an attacker to cause a denial of service by creating a large number of socket pairs using the socketpair function, setting a… | |
CVE-1999-1564 | | 1999-09-02 | FreeBSD 3.2 and possibly other versions allows a local user to cause a denial of service (panic) with a large number accesses of an NFS v3 mounted directory fr… | |
CVE-1999-0703 | | 1999-08-03 | OpenBSD, BSDI, and other Unix operating systems allow users to set chflags and fchflags on character and block devices. | |
CVE-1999-1518 | | 1999-07-15 | Operating systems with shared memory implementations based on BSD 4.4 code allow a user to conduct a denial of service and bypass memory limits (e.g., as speci… | |
CVE-1999-0405 | | 1999-02-18 | A buffer overflow in lsof allows local users to obtain root privilege. | |
CVE-1999-0798 | | 1998-12-04 | Buffer overflow in bootpd on OpenBSD, FreeBSD, and Linux systems via a malformed header type. | |
CVE-1999-0782 | | 1998-11-18 | KDE kppp allows local users to create a directory in an arbitrary location via the HOME environmental variable. | |
CVE-1999-0781 | | 1998-11-18 | KDE allows local users to execute arbitrary commands by setting the KDEDIR environmental variable to modify the search path that KDE uses to locate its executa… | |
CVE-1999-0780 | | 1998-11-18 | KDE klock allows local users to kill arbitrary processes by specifying an arbitrary PID in the .kss.pid file. | |
CVE-1999-0057 | | 1998-11-16 | Vacation program allows command execution by remote users through a sendmail command. | |
CVE-1999-0052 | High | 7.5 | 1998-11-04 | IP fragmentation denial of service in FreeBSD allows a remote attacker to cause a crash. |
CVE-1999-0053 | | 1998-10-13 | TCP RST denial of service in FreeBSD. | |
CVE-1999-0783 | Medium | 5.5 | 1998-06-16 | FreeBSD allows local users to conduct a denial of service by creating a hard link from a device special file to a file on an NFS file system. |
CVE-1999-0796 | | 1998-05-01 | FreeBSD T/TCP Extensions for Transactions can be subjected to spoofing attacks. |