Openbsd
Page 4 of 4 — Openbsd CVEs from a corpus of 304, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2001-1145 | | 2001-08-17 | fts routines in FreeBSD 4.3 and earlier, NetBSD before 1.5.2, and OpenBSD 2.9 and earlier can be forced to change (chdir) into a different directory than inten… | |
CVE-2001-0554 | | 2001-08-14 | Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a set of options incl… | |
CVE-2001-0529 | | 2001-08-14 | OpenSSH version 2.9 and earlier, with X forwarding enabled, allows a local attacker to delete any file named 'cookies' via a symlink attack. | |
CVE-2001-1244 | | 2001-07-07 | Multiple TCP implementations could allow remote attackers to cause a denial of service (bandwidth and CPU exhaustion) by setting the maximum segment size (MSS)… | |
CVE-2001-0378 | | 2001-06-27 | readline prior to 4.1, in OpenBSD 2.8 and earlier, creates history files with insecure permissions, which allows a local attacker to recover potentially sensit… | |
CVE-2001-0361 | | 2001-06-27 | Implementations of SSH version 1.5, including (1) OpenSSH up to version 2.3.0, (2) AppGate, and (3) ssh-1 up to version 1.2.31, in certain configurations, allo… | |
CVE-2001-1459 | | 2001-06-19 | OpenSSH 2.9 and earlier does not initiate a Pluggable Authentication Module (PAM) session if commands are executed with no pty, which allows local users to byp… | |
CVE-2001-0402 | | 2001-06-18 | IPFilter 3.4.16 and earlier does not include sufficient session information in its cache, which allows remote attackers to bypass access restrictions by sendin… | |
CVE-2001-0247 | | 2001-06-18 | Buffer overflows in BSD-based FTP servers allows remote attackers to execute arbitrary commands via a long pattern string containing a {} sequence, as seen in… | |
CVE-2001-1047 | | 2001-06-02 | Race condition in OpenBSD VFS allows local users to cause a denial of service (kernel panic) by (1) creating a pipe in one thread and causing another thread to… | |
CVE-2001-0284 | | 2001-05-03 | Buffer overflow in IPSEC authentication mechanism for OpenBSD 2.8 and earlier allows remote attackers to cause a denial of service and possibly execute arbitra… | |
CVE-2001-0268 | | 2001-05-03 | The i386_set_ldt system call in NetBSD 1.5 and earlier, and OpenBSD 2.8 and earlier, when the USER_LDT kernel option is enabled, does not validate a call gate… | |
CVE-2001-0144 | | 2001-03-12 | CORE SDI SSH1 CRC-32 compensation attack detector allows remote attackers to execute arbitrary commands on an SSH server or client via an integer overflow. | |
CVE-2000-0313 | | 2001-03-12 | Vulnerability in OpenBSD 2.6 allows a local user to change interface media configurations. | |
CVE-2000-0312 | | 2001-03-12 | cron in OpenBSD 2.5 allows local users to gain root privileges via an argv[] that is not NULL terminated, which is passed to cron's fake popen function. | |
CVE-2000-0310 | | 2001-03-12 | IP fragment assembly in OpenBSD 2.4 allows a remote attacker to cause a denial of service by sending a large number of fragmented packets. | |
CVE-2000-0309 | | 2001-03-12 | The i386 trace-trap handling in OpenBSD 2.4 with DDB enabled allows a local user to cause a denial of service. | |
CVE-2001-0053 | | 2001-02-12 | One-byte buffer overflow in replydirname function in BSD-based ftpd allows remote attackers to gain root privileges. | |
CVE-2000-1169 | | 2001-01-09 | OpenSSH SSH client before 2.3.0 does not properly disable X11 or agent forwarding, which could allow a malicious SSH server to gain access to the X11 display a… | |
CVE-2000-0997 | | 2000-12-19 | Format string vulnerabilities in eeprom program in OpenBSD, NetBSD, and possibly other operating systems allows local attackers to gain root privileges. | |
CVE-2000-0996 | | 2000-12-19 | Format string vulnerability in OpenBSD su program (and possibly other BSD-based operating systems) allows local attackers to gain root privileges via a malform… | |
CVE-2000-0995 | | 2000-12-19 | Format string vulnerability in OpenBSD yp_passwd program (and possibly other BSD-based operating systems) allows attackers to gain root privileges a malformed… | |
CVE-2000-0994 | | 2000-12-19 | Format string vulnerability in OpenBSD fstat program (and possibly other BSD-based operating systems) allows local users to gain root privileges via the PWD en… | |
CVE-2000-0993 | | 2000-12-19 | Format string vulnerability in pw_error function in BSD libutil library allows local users to gain root privileges via a malformed password in commands such as… | |
CVE-2000-0992 | | 2000-12-19 | Directory traversal vulnerability in scp in sshd 1.2.xx allows a remote malicious scp server to overwrite arbitrary files via a .. (dot dot) attack. | |
CVE-2000-0962 | | 2000-12-19 | The IPSEC implementation in OpenBSD 2.7 does not properly handle empty AH/ESP packets, which allows remote attackers to cause a denial of service. | |
CVE-2000-0914 | | 2000-12-19 | OpenBSD 2.6 and earlier allows remote attackers to cause a denial of service by flooding the server with ARP requests. | |
CVE-2000-1010 | | 2000-12-11 | Format string vulnerability in talkd in OpenBSD and possibly other BSD-based OSes allows remote attackers to execute arbitrary commands via a user name that co… | |
CVE-2000-1004 | | 2000-12-11 | Format string vulnerability in OpenBSD photurisd allows local users to execute arbitrary commands via a configuration file directory name that contains formatt… | |
CVE-2000-0999 | | 2000-12-11 | Format string vulnerabilities in OpenBSD ssh program (and possibly other BSD-based operating systems) allow attackers to gain root privileges. | |
CVE-2000-0751 | | 2000-10-20 | mopd (Maintenance Operations Protocol loader daemon) does not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary… | |
CVE-2000-0750 | | 2000-10-20 | Buffer overflow in mopd (Maintenance Operations Protocol loader daemon) allows remote attackers to execute arbitrary commands via a long file name. | |
CVE-2000-0574 | | 2000-07-07 | FTP servers such as OpenBSD ftpd, NetBSD ftpd, ProFTPd and Opieftpd do not properly cleanse untrusted format strings that are used in the setproctitle function… | |
CVE-2000-0525 | | 2000-06-08 | OpenSSH does not properly drop privileges when the UseLogin option is enabled, which allows local users to execute arbitrary commands by providing the command… | |
CVE-2000-0217 | | 2000-02-24 | The default configuration of SSH allows X forwarding, which could allow a remote attacker to control a client's X sessions via a malicious xauth program. | |
CVE-2000-0143 | | 2000-02-11 | The SSH protocol server sshd allows local users without shell access to redirect a TCP connection through a service that uses the standard system password data… | |
CVE-2000-0092 | | 2000-01-19 | The BSD make program allows local users to modify files via a symlink attack when the -j option is being used. | |
CVE-1999-0001 | | 1999-12-30 | ip_input.c in BSD-derived TCP/IP implementations allows remote attackers to cause a denial of service (crash or hang) via crafted packets. | |
CVE-1999-1010 | | 1999-12-14 | An SSH 1.2.27 server allows a client to use the "none" cipher, even if it is not allowed by the server policy. | |
CVE-2000-0489 | | 1999-09-05 | FreeBSD, NetBSD, and OpenBSD allow an attacker to cause a denial of service by creating a large number of socket pairs using the socketpair function, setting a… | |
CVE-1999-0724 | | 1999-08-12 | Buffer overflow in OpenBSD procfs and fdescfs file systems via uio_offset in the readdir() function. | |
CVE-1999-0674 | | 1999-08-09 | The BSD profil system call allows a local user to modify the internal data space of a program via profiling and execve. | |
CVE-1999-0727 | | 1999-08-06 | A kernel leak in the OpenBSD kernel allows IPsec packets to be sent unencrypted. | |
CVE-1999-0703 | | 1999-08-03 | OpenBSD, BSDI, and other Unix operating systems allow users to set chflags and fchflags on character and block devices. | |
CVE-1999-0481 | | 1999-03-22 | Denial of service in "poll" in OpenBSD. | |
CVE-1999-0482 | | 1999-03-21 | OpenBSD kernel crash through TSS handling, as caused by the crashme program. | |
CVE-1999-0483 | | 1999-02-25 | OpenBSD crash using nlink value in FFS and EXT2FS filesystems. | |
CVE-1999-0484 | | 1999-02-23 | Buffer overflow in OpenBSD ping. | |
CVE-1999-0485 | | 1999-02-19 | Remote attackers can cause a system crash through ipintr() in ipq in OpenBSD. | |
CVE-1999-0396 | | 1999-02-17 | A race condition between the select() and accept() calls in NetBSD TCP servers allows remote attackers to cause a denial of service. | |
CVE-1999-0798 | | 1998-12-04 | Buffer overflow in bootpd on OpenBSD, FreeBSD, and Linux systems via a malformed header type. | |
CVE-1999-0052 | High | 7.5 | 1998-11-04 | IP fragmentation denial of service in FreeBSD allows a remote attacker to cause a crash. |
CVE-1999-0062 | | 1998-08-03 | The chpass command in OpenBSD allows a local user to gain root access through file descriptor leakage. | |
CVE-1999-0303 | | 1998-05-21 | Buffer overflow in BNU UUCP daemon (uucpd) through long hostnames. | |
CVE-1999-0323 | | 1998-02-20 | FreeBSD mmap function allows users to modify append-only or immutable files. | |
CVE-1999-0305 | | 1998-02-01 | The system configuration control (sysctl) facility in BSD based operating systems OpenBSD 2.2 and earlier, and FreeBSD 2.2.5 and earlier, does not properly res… | |
CVE-1999-0304 | | 1998-02-01 | mmap function in BSD allows local attackers in the kmem group to modify memory through devices. | |
CVE-1999-0061 | | 1997-10-02 | File creation and deletion, and remote execution, in the BSD line printer daemon (lpd). | |
CVE-1999-1214 | | 1997-09-15 | The asynchronous I/O facility in 4.4 BSD kernel does not check user credentials when setting the recipient of I/O notification, which allows local users to cau… | |
CVE-1999-1225 | | 1997-08-24 | rpc.mountd on Linux, Ultrix, and possibly other operating systems, allows remote attackers to determine the existence of a file on the server by attempting to… |