FreeBSD
Page 7 of 7 — FreeBSD CVEs from a corpus of 635, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-1999-0323 | | 1998-02-20 | FreeBSD mmap function allows users to modify append-only or immutable files. | |
CVE-1999-0305 | | 1998-02-01 | The system configuration control (sysctl) facility in BSD based operating systems OpenBSD 2.2 and earlier, and FreeBSD 2.2.5 and earlier, does not properly res… | |
CVE-1999-0304 | | 1998-02-01 | mmap function in BSD allows local attackers in the kmem group to modify memory through devices. | |
CVE-1999-0513 | | 1998-01-05 | ICMP messages to broadcast addresses are allowed, allowing for a Smurf attack that can cause a denial of service. | |
CVE-1999-0017 | | 1997-12-10 | FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce. | |
CVE-1999-0322 | | 1997-10-29 | The open() function in FreeBSD allows local attackers to write to arbitrary files. | |
CVE-1999-0061 | | 1997-10-02 | File creation and deletion, and remote execution, in the BSD line printer daemon (lpd). | |
CVE-1999-1214 | | 1997-09-15 | The asynchronous I/O facility in 4.4 BSD kernel does not check user credentials when setting the recipient of I/O notification, which allows local users to cau… | |
CVE-1999-0628 | | 1997-07-01 | The rwho/rwhod service is running, which exposes machine status and user information. | |
CVE-1999-0074 | | 1997-07-01 | Listening TCP ports are sequentially allocated, allowing spoofing attacks. | |
CVE-1999-0037 | | 1997-05-21 | Arbitrary command execution via metamail package using message headers, when user processes attacker's message using metamail. | |
CVE-1999-1402 | | 1997-05-17 | The access permissions for a UNIX domain socket are ignored in Solaris 2.x and SunOS 4.x, and other BSD-based operating systems before 4.4, which could allow l… | |
CVE-1999-0040 | | 1997-05-01 | Buffer overflow in Xt library of X Windowing System allows local users to execute commands with root privileges. | |
CVE-1999-1298 | | 1997-04-07 | Sysinstall in FreeBSD 2.2.1 and earlier, when configuring anonymous FTP, creates the ftp user without a password and with /bin/date as the shell, which could a… | |
CVE-1999-0299 | | 1997-03-05 | Buffer overflow in FreeBSD lpd through long DNS hostnames. | |
CVE-1999-0046 | | 1997-02-06 | Buffer overflow of rlogin program using TERM environmental variable. | |
CVE-1999-0345 | | 1997-01-01 | Jolt ICMP attack causes a denial of service in Windows 95 and Windows NT systems. | |
CVE-1999-1385 | | 1996-12-19 | Buffer overflow in ppp program in FreeBSD 2.1 and earlier allows local users to gain privileges via a long HOME environment variable. | |
CVE-1999-0297 | | 1996-12-12 | Buffer overflow in Vixie Cron library up to version 3.0 allows local users to obtain root access via a long environmental variable. | |
CVE-1999-0096 | | 1996-12-10 | Sendmail decode alias can be used to overwrite sensitive files. | |
CVE-1999-0129 | | 1996-12-03 | Sendmail allows local users to write to a file and gain group permissions via a .forward or :include: file. | |
CVE-1999-0130 | | 1996-11-16 | Local users can start Sendmail in daemon mode and gain root privileges. | |
CVE-1999-0032 | | 1996-10-25 | Buffer overflow in lpr, as used in BSD-based systems including Linux, allows local users to execute arbitrary code as root via a long -C (classification) comma… | |
CVE-1999-0131 | | 1996-09-11 | Buffer overflow and denial of service in Sendmail 8.7.5 and earlier through GECOS field gives root access to local users. | |
CVE-1999-1187 | | 1996-08-26 | Pine before version 3.94 allows local users to gain privileges via a symlink attack on a lockfile that is created when a user receives new mail. | |
CVE-1999-0085 | | 1996-08-21 | Buffer overflow in rwhod on AIX and other operating systems allows remote attackers to execute arbitrary code via a UDP packet with a long hostname. | |
CVE-1999-0023 | | 1996-07-24 | Local user gains root privileges via buffer overflow in rdist, via lookup() function. | |
CVE-1999-1572 | | 1996-07-16 | cpio on FreeBSD 2.1.0, Debian GNU/Linux 3.0, and possibly other operating systems, uses a 0 umask when creating files using the -O (archive) or -F options, whi… | |
CVE-1999-1301 | | 1996-07-16 | A design flaw in the Z-Modem protocol allows the remote sender of a file to execute arbitrary programs on the client, as implemented in rz in the rzsz module o… | |
CVE-1999-0022 | High | 7.8 | 1996-07-03 | Local user gains root privileges via buffer overflow in rdist, via expstr() function. |
CVE-1999-0138 | | 1996-06-26 | The suidperl and sperl program do not give up root privileges when changing UIDs back to the original users, allowing root access. | |
CVE-1999-1313 | | 1996-05-23 | Manual page reader (man) in FreeBSD 2.2 and earlier allows local users to gain privileges via a sequence of commands. | |
CVE-1999-1314 | | 1996-05-17 | Vulnerability in union file system in FreeBSD 2.2 and earlier, and possibly other operating systems, allows local users to cause a denial of service (system re… | |
CVE-1999-0078 | | 1996-04-18 | pcnfsd (aka rpc.pcnfsd) allows local users to change file permissions, or execute arbitrary commands through arguments in the RPC call. | |
CVE-2000-0388 | | 1990-05-09 | Buffer overflow in FreeBSD libmytinfo library allows local users to execute commands via a long TERMCAP environmental variable. |