Freebsd
Page 6 of 6 — Freebsd CVEs from a corpus of 508, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2001-0230 | | 2001-06-02 | Buffer overflow in dc20ctrl before 0.4_1 in FreeBSD, and possibly other operating systems, allows local users to gain privileges. | |
CVE-2001-0221 | | 2001-06-02 | Buffer overflow in ja-xklock 2.7.1 and earlier allows local users to gain root privileges. | |
CVE-2001-0196 | | 2001-05-03 | inetd ident server in FreeBSD 4.x and earlier does not properly set group permissions, which allows remote attackers to read the first 16 bytes of files that a… | |
CVE-2001-0183 | | 2001-03-26 | ipfw and ip6fw in FreeBSD 4.2 and earlier allows remote attackers to bypass access restrictions by setting the ECE flag in a TCP packet, which makes the packet… | |
CVE-2001-0128 | | 2001-03-12 | Zope before 2.2.4 does not properly compute local roles, which could allow users to bypass specified access restrictions and gain privileges. | |
CVE-2000-0375 | | 2001-03-12 | The kernel in FreeBSD 3.2 follows symbolic links when it creates core dump files, which allows local attackers to modify arbitrary files. | |
CVE-2000-0890 | | 2001-02-16 | periodic in FreeBSD 4.1.1 and earlier, and possibly other operating systems, allows local users to overwrite arbitrary files via a symlink attack. | |
CVE-2001-0094 | | 2001-02-12 | Buffer overflow in kdc_reply_cipher of libkrb (Kerberos 4 authentication library) in NetBSD 1.5 and FreeBSD 4.2 and earlier, as used in Kerberised applications… | |
CVE-2001-0093 | | 2001-02-12 | Vulnerability in telnetd in FreeBSD 1.5 allows local users to gain root privileges by modifying critical environmental variables that affect the behavior of te… | |
CVE-2001-0063 | | 2001-02-12 | procfs in FreeBSD and possibly other operating systems allows local users to bypass access control restrictions for a jail environment and gain additional priv… | |
CVE-2001-0062 | | 2001-02-12 | procfs in FreeBSD and possibly other operating systems allows local users to cause a denial of service by calling mmap on the process' own mem file, which caus… | |
CVE-2001-0061 | | 2001-02-12 | procfs in FreeBSD and possibly other operating systems does not properly restrict access to per-process mem and ctl files, which allows local users to gain roo… | |
CVE-2000-1184 | | 2001-01-09 | telnetd in FreeBSD 4.2 and earlier, and possibly other operating systems, allows remote attackers to cause a denial of service by specifying an arbitrary large… | |
CVE-2000-1167 | | 2001-01-09 | ppp utility in FreeBSD 4.1.1 and earlier does not properly restrict access as specified by the "nat deny_incoming" command, which allows remote attackers to co… | |
CVE-2000-0993 | | 2000-12-19 | Format string vulnerability in pw_error function in BSD libutil library allows local users to gain root privileges via a malformed password in commands such as… | |
CVE-2000-0963 | | 2000-12-19 | Buffer overflow in ncurses library allows local users to execute arbitrary commands via long environmental information such as TERM or TERMINFO_DIRS. | |
CVE-2000-0916 | | 2000-12-19 | FreeBSD 4.1.1 and earlier, and possibly other BSD-based OSes, uses an insufficient random number generator to generate initial TCP sequence numbers (ISN), whic… | |
CVE-2000-0915 | | 2000-12-19 | fingerd in FreeBSD 4.1.1 allows remote attackers to read arbitrary files by specifying the target file name instead of a regular user name. | |
CVE-2000-1066 | | 2000-12-11 | The getnameinfo function in FreeBSD 4.1.1 and earlier, and possibly other operating systems, allows a remote attacker to cause a denial of service via a long D… | |
CVE-2000-1013 | | 2000-12-11 | The setlocale function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to read arbitrary files via the LANG environmental variable. | |
CVE-2000-1012 | | 2000-12-11 | The catopen function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to read arbitrary files via the LANG environmental variable. | |
CVE-2000-1011 | | 2000-12-11 | Buffer overflow in catopen() function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to gain root privileges via a long environmental… | |
CVE-2000-0998 | | 2000-12-11 | Format string vulnerability in top program allows local attackers to gain root privileges via the "kill" or "renice" function. | |
CVE-2000-0852 | | 2000-11-14 | Multiple buffer overflows in eject on FreeBSD and possibly other OSes allows local users to gain root privileges. | |
CVE-2000-0752 | | 2000-10-20 | Buffer overflows in brouted in FreeBSD and possibly other OSes allows local users to gain root privileges via long command line arguments. | |
CVE-2000-0749 | | 2000-10-20 | Buffer overflow in the Linux binary compatibility module in FreeBSD 3.x through 5.x allows local users to gain root privileges via long filenames in the linux… | |
CVE-2000-0729 | | 2000-10-20 | FreeBSD 5.x, 4.x, and 3.x allows local users to cause a denial of service by executing a program with a malformed ELF image header. | |
CVE-1999-0761 | | 2000-09-16 | Buffer overflow in FreeBSD fts library routines allows local user to modify arbitrary files via the periodic program. | |
CVE-2000-0595 | | 2000-07-05 | libedit searches for the .editrc file in the current directory instead of the user's home directory, which may allow local users to execute arbitrary commands… | |
CVE-2000-0594 | | 2000-07-04 | BitchX IRC client does not properly cleanse an untrusted format string, which allows remote attackers to cause a denial of service via an invite to a channel w… | |
CVE-2000-0584 | | 2000-07-02 | Buffer overflow in Canna input system allows remote attackers to execute arbitrary commands via an SR_INIT command with a long user name or group name. | |
CVE-2000-0535 | | 2000-06-12 | OpenSSL 0.9.4 and OpenSSH for FreeBSD do not properly check for the existence of the /dev/random or /dev/urandom devices, which are absent on FreeBSD Alpha sys… | |
CVE-2000-0532 | | 2000-06-07 | A FreeBSD patch for SSH on 2000-01-14 configures ssh to listen on port 722 as well as port 22, which might allow remote attackers to access SSH through port 72… | |
CVE-2000-0461 | | 2000-05-29 | The undocumented semconfig system call in BSD freezes the state of semaphores, which allows local users to cause a denial of service of the semaphore system by… | |
CVE-1999-1008 | | 2000-05-17 | xsoldier program allows local users to gain root access via a long argument. | |
CVE-2000-0440 | | 2000-05-01 | NetBSD 1.4.2 and earlier allows remote attackers to cause a denial of service by sending a packet with an unaligned IP timestamp option. | |
CVE-2000-0235 | | 2000-03-27 | Buffer overflow in the huh program in the orville-write package allows local users to gain root privileges. | |
CVE-2000-0186 | | 2000-02-28 | Buffer overflow in the dump utility in the Linux ext2fs backup package allows local users to gain privileges via a long command line argument. | |
CVE-2000-0163 | | 2000-02-21 | asmon and ascpu in FreeBSD allow local users to gain root privileges via a configuration file. | |
CVE-2000-0092 | | 2000-01-19 | The BSD make program allows local users to modify files via a symlink attack when the -j option is being used. | |
CVE-1999-0964 | | 2000-01-01 | Buffer overflow in FreeBSD setlocale in the libc module allows attackers to execute arbitrary code via a long PATH_LOCALE environment variable. | |
CVE-1999-1339 | | 1999-12-31 | Vulnerability when Network Address Translation (NAT) is enabled in Linux 2.2.10 and earlier with ipchains, or FreeBSD 3.2 with ipfw, allows remote attackers to… | |
CVE-1999-0001 | | 1999-12-30 | ip_input.c in BSD-derived TCP/IP implementations allows remote attackers to cause a denial of service (crash or hang) via crafted packets. | |
CVE-1999-0963 | | 1999-12-01 | FreeBSD mount_union command allows local users to gain root privileges via a symlink attack. | |
CVE-1999-0857 | | 1999-12-01 | FreeBSD gdc program allows local users to modify files via a symlink attack. | |
CVE-1999-0855 | | 1999-12-01 | Buffer overflow in FreeBSD gdc program. | |
CVE-1999-0826 | | 1999-12-01 | Buffer overflow in FreeBSD angband allows local users to gain privileges. | |
CVE-1999-0823 | | 1999-12-01 | Buffer overflow in FreeBSD xmindpath allows local users to gain privileges via -f argument. | |
CVE-1999-0820 | | 1999-12-01 | FreeBSD seyon allows users to gain privileges via a modified PATH variable for finding the xterm and seyon-emu commands. | |
CVE-1999-0863 | | 1999-11-08 | Buffer overflow in FreeBSD seyon via HOME environmental variable, -emulator argument, -modems argument, or the GUI. | |
CVE-1999-0821 | | 1999-11-08 | FreeBSD seyon allows local users to gain privileges by providing a malicious program in the -emulator argument. | |
CVE-1999-1517 | | 1999-11-01 | runtar in the Amanda backup system used in various UNIX operating systems executes tar with root privileges, which allows a user to overwrite or read arbitrary… | |
CVE-1999-0912 | | 1999-09-22 | FreeBSD VFS cache (vfs_cache) allows local users to cause a denial of service by opening a large number of files. | |
CVE-1999-0704 | | 1999-09-16 | Buffer overflow in Berkeley automounter daemon (amd) logging facility provided in the Linux am-utils package and others. | |
CVE-2000-0489 | | 1999-09-05 | FreeBSD, NetBSD, and OpenBSD allow an attacker to cause a denial of service by creating a large number of socket pairs using the socketpair function, setting a… | |
CVE-1999-1564 | | 1999-09-02 | FreeBSD 3.2 and possibly other versions allows a local user to cause a denial of service (panic) with a large number accesses of an NFS v3 mounted directory fr… | |
CVE-1999-0703 | | 1999-08-03 | OpenBSD, BSDI, and other Unix operating systems allow users to set chflags and fchflags on character and block devices. | |
CVE-1999-1518 | | 1999-07-15 | Operating systems with shared memory implementations based on BSD 4.4 code allow a user to conduct a denial of service and bypass memory limits (e.g., as speci… | |
CVE-1999-0405 | | 1999-02-18 | A buffer overflow in lsof allows local users to obtain root privilege. | |
CVE-1999-0798 | | 1998-12-04 | Buffer overflow in bootpd on OpenBSD, FreeBSD, and Linux systems via a malformed header type. | |
CVE-1999-0782 | | 1998-11-18 | KDE kppp allows local users to create a directory in an arbitrary location via the HOME environmental variable. | |
CVE-1999-0781 | | 1998-11-18 | KDE allows local users to execute arbitrary commands by setting the KDEDIR environmental variable to modify the search path that KDE uses to locate its executa… | |
CVE-1999-0780 | | 1998-11-18 | KDE klock allows local users to kill arbitrary processes by specifying an arbitrary PID in the .kss.pid file. | |
CVE-1999-0057 | | 1998-11-16 | Vacation program allows command execution by remote users through a sendmail command. | |
CVE-1999-0052 | High | 7.5 | 1998-11-04 | IP fragmentation denial of service in FreeBSD allows a remote attacker to cause a crash. |
CVE-1999-0053 | | 1998-10-13 | TCP RST denial of service in FreeBSD. | |
CVE-1999-0783 | Medium | 5.5 | 1998-06-16 | FreeBSD allows local users to conduct a denial of service by creating a hard link from a device special file to a file on an NFS file system. |
CVE-1999-0796 | | 1998-05-01 | FreeBSD T/TCP Extensions for Transactions can be subjected to spoofing attacks. | |
CVE-1999-0323 | | 1998-02-20 | FreeBSD mmap function allows users to modify append-only or immutable files. | |
CVE-1999-0305 | | 1998-02-01 | The system configuration control (sysctl) facility in BSD based operating systems OpenBSD 2.2 and earlier, and FreeBSD 2.2.5 and earlier, does not properly res… | |
CVE-1999-0304 | | 1998-02-01 | mmap function in BSD allows local attackers in the kmem group to modify memory through devices. | |
CVE-1999-0513 | | 1998-01-05 | ICMP messages to broadcast addresses are allowed, allowing for a Smurf attack that can cause a denial of service. | |
CVE-1999-0017 | | 1997-12-10 | FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce. | |
CVE-1999-0322 | | 1997-10-29 | The open() function in FreeBSD allows local attackers to write to arbitrary files. | |
CVE-1999-0061 | | 1997-10-02 | File creation and deletion, and remote execution, in the BSD line printer daemon (lpd). | |
CVE-1999-1214 | | 1997-09-15 | The asynchronous I/O facility in 4.4 BSD kernel does not check user credentials when setting the recipient of I/O notification, which allows local users to cau… | |
CVE-1999-0628 | | 1997-07-01 | The rwho/rwhod service is running, which exposes machine status and user information. | |
CVE-1999-0074 | | 1997-07-01 | Listening TCP ports are sequentially allocated, allowing spoofing attacks. | |
CVE-1999-0037 | | 1997-05-21 | Arbitrary command execution via metamail package using message headers, when user processes attacker's message using metamail. | |
CVE-1999-1402 | | 1997-05-17 | The access permissions for a UNIX domain socket are ignored in Solaris 2.x and SunOS 4.x, and other BSD-based operating systems before 4.4, which could allow l… | |
CVE-1999-0040 | | 1997-05-01 | Buffer overflow in Xt library of X Windowing System allows local users to execute commands with root privileges. | |
CVE-1999-1298 | | 1997-04-07 | Sysinstall in FreeBSD 2.2.1 and earlier, when configuring anonymous FTP, creates the ftp user without a password and with /bin/date as the shell, which could a… | |
CVE-1999-0299 | | 1997-03-05 | Buffer overflow in FreeBSD lpd through long DNS hostnames. | |
CVE-1999-0046 | | 1997-02-06 | Buffer overflow of rlogin program using TERM environmental variable. | |
CVE-1999-0345 | | 1997-01-01 | Jolt ICMP attack causes a denial of service in Windows 95 and Windows NT systems. | |
CVE-1999-1385 | | 1996-12-19 | Buffer overflow in ppp program in FreeBSD 2.1 and earlier allows local users to gain privileges via a long HOME environment variable. | |
CVE-1999-0297 | | 1996-12-12 | Buffer overflow in Vixie Cron library up to version 3.0 allows local users to obtain root access via a long environmental variable. | |
CVE-1999-0096 | | 1996-12-10 | Sendmail decode alias can be used to overwrite sensitive files. | |
CVE-1999-0129 | | 1996-12-03 | Sendmail allows local users to write to a file and gain group permissions via a .forward or :include: file. | |
CVE-1999-0130 | | 1996-11-16 | Local users can start Sendmail in daemon mode and gain root privileges. | |
CVE-1999-0032 | | 1996-10-25 | Buffer overflow in lpr, as used in BSD-based systems including Linux, allows local users to execute arbitrary code as root via a long -C (classification) comma… | |
CVE-1999-0131 | | 1996-09-11 | Buffer overflow and denial of service in Sendmail 8.7.5 and earlier through GECOS field gives root access to local users. | |
CVE-1999-1187 | | 1996-08-26 | Pine before version 3.94 allows local users to gain privileges via a symlink attack on a lockfile that is created when a user receives new mail. | |
CVE-1999-0085 | | 1996-08-21 | Buffer overflow in rwhod on AIX and other operating systems allows remote attackers to execute arbitrary code via a UDP packet with a long hostname. | |
CVE-1999-0023 | | 1996-07-24 | Local user gains root privileges via buffer overflow in rdist, via lookup() function. | |
CVE-1999-1572 | | 1996-07-16 | cpio on FreeBSD 2.1.0, Debian GNU/Linux 3.0, and possibly other operating systems, uses a 0 umask when creating files using the -O (archive) or -F options, whi… | |
CVE-1999-1301 | | 1996-07-16 | A design flaw in the Z-Modem protocol allows the remote sender of a file to execute arbitrary programs on the client, as implemented in rz in the rzsz module o… | |
CVE-1999-0022 | High | 7.8 | 1996-07-03 | Local user gains root privileges via buffer overflow in rdist, via expstr() function. |
CVE-1999-0138 | | 1996-06-26 | The suidperl and sperl program do not give up root privileges when changing UIDs back to the original users, allowing root access. | |
CVE-1999-1313 | | 1996-05-23 | Manual page reader (man) in FreeBSD 2.2 and earlier allows local users to gain privileges via a sequence of commands. |