Netbsd
Page 2 of 2 — Netbsd CVEs from a corpus of 173, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2004-0114 | | 2004-03-03 | The shmat system call in the System V Shared Memory interface for FreeBSD 5.2 and earlier, NetBSD 1.3 and earlier, and OpenBSD 2.6 and earlier, does not proper… | |
CVE-2003-1289 | | 2003-12-31 | The iBCS2 system call translator for statfs in NetBSD 1.5 through 1.5.3 and FreeBSD 4 up to 4.8-RELEASE-p2 and 5 up to 5.1-RELEASE-p1 allows local users to rea… | |
CVE-2003-0914 | | 2003-12-15 | ISC BIND 8.3.x before 8.3.7, and 8.4.x before 8.4.3, allows remote attackers to poison the cache via a malicious name server that returns negative responses wi… | |
CVE-2003-0730 | | 2003-10-20 | Multiple integer overflows in the font libraries for XFree86 4.3.0 allow local or remote attackers to cause a denial of service or execute arbitrary code via h… | |
CVE-2003-0694 | | 2003-10-06 | The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr func… | |
CVE-2003-0681 | | 2003-10-06 | A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets (1) recipient (2), final, or (3) mailer-specific enve… | |
CVE-2003-0653 | | 2003-08-27 | The OSI networking kernel (sys/netiso) in NetBSD 1.6.1 and earlier does not use a BSD-required "PKTHDR" mbuf when sending certain error responses to the sender… | |
CVE-2003-0466 | Critical | 9.8 | 2003-08-27 | Off-by-one error in the fb_realpath() function, as derived from the realpath function in BSD, may allow attackers to execute arbitrary code, as demonstrated in… |
CVE-2002-1476 | | 2003-04-22 | Buffer overflow in setlocale in libc on NetBSD 1.4.x through 1.6, and possibly other operating systems, when called with the LC_ALL category, allows local atta… | |
CVE-2002-1500 | | 2003-04-02 | Buffer overflow in (1) mrinfo, (2) mtrace, and (3) pppd in NetBSD 1.4.x through 1.6 allows local users to gain privileges by executing the programs after filli… | |
CVE-2002-1490 | | 2003-04-02 | NetBSD 1.4 through 1.6 beta allows local users to cause a denial of service (kernel panic) via a series of calls to the TIOCSCTTY ioctl, which causes an intege… | |
CVE-2002-1543 | | 2003-03-31 | Buffer overflow in trek on NetBSD 1.5 through 1.5.3 allows local users to gain privileges via long keyboard input. | |
CVE-2003-0102 | | 2003-03-18 | Buffer overflow in tryelf() in readelf.c of the file command allows attackers to execute arbitrary code as the user running file, possibly via a large entity s… | |
CVE-2002-1337 | | 2003-03-07 | Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related to sender and recipi… | |
CVE-2003-0001 | | 2003-01-17 | Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows remote attackers to obtain information from previ… | |
CVE-2002-2245 | | 2002-12-31 | ftpd in NetBSD 1.5 through 1.5.3 and 1.6 does not properly quote a digit in response to a STAT command for a filename that contains a carriage return followed… | |
CVE-2002-2092 | | 2002-12-31 | Race condition in exec in OpenBSD 4.0 and earlier, NetBSD 1.5.2 and earlier, and FreeBSD 4.4 and earlier allows local users to gain privileges by attaching a d… | |
CVE-2002-1915 | Medium | 5.5 | 2002-12-31 | tip on multiple BSD-based operating systems allows local users to cause a denial of service (execution prevention) by using flock() to lock the /var/log/acculo… |
CVE-2002-0666 | | 2002-11-04 | IPSEC implementations including (1) FreeS/WAN and (2) KAME do not properly calculate the length of authentication data, which allows remote attackers to cause… | |
CVE-2002-1194 | | 2002-10-28 | Buffer overflow in talkd on NetBSD 1.6 and earlier, and possibly other operating systems, may allow remote attackers to execute arbitrary code via a long inbou… | |
CVE-2002-1192 | | 2002-10-28 | Multiple buffer overflows in rogue on NetBSD 1.6 and earlier, FreeBSD 4.6, and possibly other operating systems, allows local users to gain "games" group privi… | |
CVE-2002-1165 | | 2002-10-11 | Sendmail Consortium's Restricted Shell (SMRSH) in Sendmail 8.12.6, 8.11.6-15, and possibly other versions after 8.11 from 5/19/1998, allows attackers to bypass… | |
CVE-2002-0414 | | 2002-08-12 | KAME-derived implementations of IPsec on NetBSD 1.5.2, FreeBSD 4.5, and other operating systems, does not properly consult the Security Policy Database (SPD)… | |
CVE-2000-1208 | | 2002-08-12 | Format string vulnerability in startprinting() function of printjob.c in BSD-based lpr lpd package may allow local users to gain privileges via an improper sys… | |
CVE-2002-0381 | | 2002-06-25 | The TCP implementation in various BSD operating systems (tcp_input.c) does not properly block connections to broadcast addresses, which could allow remote atta… | |
CVE-2002-0004 | | 2002-02-27 | Heap corruption vulnerability in the "at" program allows local users to execute arbitrary code via a malformed execution time, which causes at to free the same… | |
CVE-2001-0734 | | 2001-10-18 | Hitachi Super-H architecture in NetBSD 1.5 and 1.4.1 allows a local user to gain privileges via modified Status Register contents, which are not properly handl… | |
CVE-2001-0670 | | 2001-10-03 | Buffer overflow in BSD line printer daemon (in.lpd or lpd) in various BSD-based operating systems allows remote attackers to execute arbitrary code via an inco… | |
CVE-2001-0710 | | 2001-09-20 | NetBSD 1.5 and earlier and FreeBSD 4.3 and earlier allows a remote attacker to cause a denial of service by sending a large number of IP fragments to the machi… | |
CVE-2001-1091 | | 2001-08-23 | The (1) dump and (2) dump_lfs commands in NetBSD 1.4.x through 1.5.1 do not properly drop privileges, which could allow local users to gain privileges via the… | |
CVE-2001-1145 | | 2001-08-17 | fts routines in FreeBSD 4.3 and earlier, NetBSD before 1.5.2, and OpenBSD 2.9 and earlier can be forced to change (chdir) into a different directory than inten… | |
CVE-2001-0554 | | 2001-08-14 | Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a set of options incl… | |
CVE-2001-0993 | | 2001-07-24 | sendmsg function in NetBSD 1.3 through 1.5 allows local users to cause a denial of service (kernel trap or panic) via a msghdr structure with a large msg_contr… | |
CVE-2001-1244 | | 2001-07-07 | Multiple TCP implementations could allow remote attackers to cause a denial of service (bandwidth and CPU exhaustion) by setting the maximum segment size (MSS)… | |
CVE-2001-0247 | | 2001-06-18 | Buffer overflows in BSD-based FTP servers allows remote attackers to execute arbitrary commands via a long pattern string containing a {} sequence, as seen in… | |
CVE-2001-0268 | | 2001-05-03 | The i386_set_ldt system call in NetBSD 1.5 and earlier, and OpenBSD 2.8 and earlier, when the USER_LDT kernel option is enabled, does not validate a call gate… | |
CVE-2000-0315 | | 2001-03-12 | traceroute in NetBSD 1.3.3 and Linux systems allows local unprivileged users to modify the source address of the packets, which could be used in spoofing attac… | |
CVE-2000-0314 | | 2001-03-12 | traceroute in NetBSD 1.3.3 and Linux systems allows local users to flood other systems by providing traceroute with a large waittime (-w) option, which is not… | |
CVE-2001-0033 | | 2001-02-16 | KTH Kerberos IV allows local users to change the configuration of a Kerberos server running at an elevated privilege by specifying an alternate directory using… | |
CVE-2001-0053 | | 2001-02-12 | One-byte buffer overflow in replydirname function in BSD-based ftpd allows remote attackers to gain root privileges. | |
CVE-2000-0997 | | 2000-12-19 | Format string vulnerabilities in eeprom program in OpenBSD, NetBSD, and possibly other operating systems allows local attackers to gain root privileges. | |
CVE-2000-0993 | | 2000-12-19 | Format string vulnerability in pw_error function in BSD libutil library allows local users to gain root privileges via a malformed password in commands such as… | |
CVE-2000-0751 | | 2000-10-20 | mopd (Maintenance Operations Protocol loader daemon) does not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary… | |
CVE-2000-0750 | | 2000-10-20 | Buffer overflow in mopd (Maintenance Operations Protocol loader daemon) allows remote attackers to execute arbitrary commands via a long file name. | |
CVE-2000-0461 | | 2000-05-29 | The undocumented semconfig system call in BSD freezes the state of semaphores, which allows local users to cause a denial of service of the semaphore system by… | |
CVE-2000-0462 | | 2000-05-28 | ftpd in NetBSD 1.4.2 does not properly parse entries in /etc/ftpchroot and does not chroot the specified users, which allows those users to access other files… | |
CVE-2000-0456 | | 2000-05-28 | NetBSD 1.4.2 and earlier allows local users to cause a denial of service by repeatedly running certain system calls in the kernel which do not yield the CPU, a… | |
CVE-2000-0440 | | 2000-05-01 | NetBSD 1.4.2 and earlier allows remote attackers to cause a denial of service by sending a packet with an unaligned IP timestamp option. | |
CVE-2000-0094 | | 2000-02-16 | procfs in BSD systems allows local users to gain root privileges by modifying the /proc/pid/mem interface via a modified file descriptor for stderr. | |
CVE-2000-0157 | | 2000-02-01 | NetBSD ptrace call on VAX allows local users to gain privileges by modifying the PSL contents in the debugging process. | |
CVE-2000-0092 | | 2000-01-19 | The BSD make program allows local users to modify files via a symlink attack when the -j option is being used. | |
CVE-2000-0489 | | 1999-09-05 | FreeBSD, NetBSD, and OpenBSD allow an attacker to cause a denial of service by creating a large number of socket pairs using the socketpair function, setting a… | |
CVE-1999-0674 | | 1999-08-09 | The BSD profil system call allows a local user to modify the internal data space of a program via profiling and execve. | |
CVE-1999-1518 | | 1999-07-15 | Operating systems with shared memory implementations based on BSD 4.4 code allow a user to conduct a denial of service and bypass memory limits (e.g., as speci… | |
CVE-1999-0764 | | 1999-05-01 | NetBSD allows ARP packets to overwrite static ARP entries. | |
CVE-1999-0763 | | 1999-05-01 | NetBSD on a multi-homed host allows ARP packets on one network to modify ARP entries on another connected network. | |
CVE-1999-0466 | | 1999-04-21 | The SVR4 /dev/wabi special device file in NetBSD 1.3.3 and earlier allows a local user to read or write arbitrary files on the disk associated with that device. | |
CVE-1999-0446 | | 1999-04-12 | Local users can perform a denial of service in NetBSD 1.3.3 and earlier versions by creating an unusual symbolic link with the ln command, triggering a bug in… | |
CVE-1999-0434 | | 1999-03-30 | XFree86 xfs command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privilege… | |
CVE-1999-0433 | | 1999-03-21 | XFree86 startx command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privil… | |
CVE-1999-0422 | | 1999-03-17 | In some cases, NetBSD 1.3.3 mount allows local users to execute programs in some file systems that have the "noexec" flag set. | |
CVE-1999-0420 | | 1999-03-17 | umapfs allows local users to gain root privileges by changing their uid through a malicious mount_umap program. | |
CVE-1999-0396 | | 1999-02-17 | A race condition between the select() and accept() calls in NetBSD TCP servers allows remote attackers to cause a denial of service. | |
CVE-1999-0367 | | 1999-02-09 | NetBSD netstat command allows local users to access kernel memory. | |
CVE-1999-1409 | | 1998-07-03 | The at program in IRIX 6.2 and NetBSD 1.3.2 and earlier allows local users to read portions of arbitrary files by submitting the file to at with the -f argumen… | |
CVE-1999-0303 | | 1998-05-21 | Buffer overflow in BNU UUCP daemon (uucpd) through long hostnames. | |
CVE-1999-0011 | Medium | 5.4 | 1998-04-08 | Denial of Service vulnerabilities in BIND 4.9 and BIND 8 Releases via CNAME record and zone transfer. |
CVE-1999-0010 | | 1998-04-08 | Denial of Service vulnerability in BIND 8 Releases via maliciously formatted DNS messages. | |
CVE-1999-0009 | | 1998-04-08 | Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases. | |
CVE-1999-0323 | | 1998-02-20 | FreeBSD mmap function allows users to modify append-only or immutable files. | |
CVE-1999-0304 | | 1998-02-01 | mmap function in BSD allows local attackers in the kmem group to modify memory through devices. | |
CVE-1999-0513 | | 1998-01-05 | ICMP messages to broadcast addresses are allowed, allowing for a Smurf attack that can cause a denial of service. | |
CVE-1999-0015 | | 1997-12-16 | Teardrop IP denial of service. | |
CVE-1999-0017 | | 1997-12-10 | FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce. | |
CVE-1999-0016 | | 1997-12-01 | Land IP denial of service. | |
CVE-1999-1214 | | 1997-09-15 | The asynchronous I/O facility in 4.4 BSD kernel does not check user credentials when setting the recipient of I/O notification, which allows local users to cau… | |
CVE-1999-1225 | | 1997-08-24 | rpc.mountd on Linux, Ultrix, and possibly other operating systems, allows remote attackers to determine the existence of a file on the server by attempting to… | |
CVE-1999-0628 | | 1997-07-01 | The rwho/rwhod service is running, which exposes machine status and user information. | |
CVE-1999-0074 | | 1997-07-01 | Listening TCP ports are sequentially allocated, allowing spoofing attacks. | |
CVE-1999-0046 | | 1997-02-06 | Buffer overflow of rlogin program using TERM environmental variable. | |
CVE-1999-0297 | | 1996-12-12 | Buffer overflow in Vixie Cron library up to version 3.0 allows local users to obtain root access via a long environmental variable. | |
CVE-1999-0085 | | 1996-08-21 | Buffer overflow in rwhod on AIX and other operating systems allows remote attackers to execute arbitrary code via a UDP packet with a long hostname. |