Page 14 of 209 results (0.005 seconds)

CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0

12 Feb 2001 — Buffer overflow in kdc_reply_cipher of libkrb (Kerberos 4 authentication library) in NetBSD 1.5 and FreeBSD 4.2 and earlier, as used in Kerberised applications such as telnetd and login, allows local users to gain root privileges. • ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:25.kerberosIV.asc •

CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 1

02 Feb 2001 — Vulnerability in telnetd in FreeBSD 1.5 allows local users to gain root privileges by modifying critical environmental variables that affect the behavior of telnetd. • https://www.exploit-db.com/exploits/409 •

CVSS: 9.8EPSS: 0%CPEs: 5EXPL: 0

09 Jan 2001 — ppp utility in FreeBSD 4.1.1 and earlier does not properly restrict access as specified by the "nat deny_incoming" command, which allows remote attackers to connect to the target system. • ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:70.ppp-nat.asc •

CVSS: 7.5EPSS: 0%CPEs: 5EXPL: 0

09 Jan 2001 — telnetd in FreeBSD 4.2 and earlier, and possibly other operating systems, allows remote attackers to cause a denial of service by specifying an arbitrary large file in the TERMCAP environmental variable, which consumes resources as the server processes the file. • ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:69.telnetd.v1.1.asc •

CVSS: 7.5EPSS: 1%CPEs: 1EXPL: 0

19 Dec 2000 — fingerd in FreeBSD 4.1.1 allows remote attackers to read arbitrary files by specifying the target file name instead of a regular user name. • ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:54.fingerd.asc •

CVSS: 7.8EPSS: 0%CPEs: 13EXPL: 2

19 Dec 2000 — Format string vulnerability in pw_error function in BSD libutil library allows local users to gain root privileges via a malformed password in commands such as chpass or passwd. • https://www.exploit-db.com/exploits/243 •

CVSS: 7.8EPSS: 0%CPEs: 12EXPL: 0

11 Dec 2000 — Buffer overflow in catopen() function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to gain root privileges via a long environmental variable. • ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:53.catopen.asc •

CVSS: 9.1EPSS: 4%CPEs: 5EXPL: 1

29 Nov 2000 — FreeBSD 4.1.1 and earlier, and possibly other BSD-based OSes, uses an insufficient random number generator to generate initial TCP sequence numbers (ISN), which allows remote attackers to spoof TCP connections. • https://www.exploit-db.com/exploits/19522 •

CVSS: 7.8EPSS: 0%CPEs: 13EXPL: 1

29 Nov 2000 — Buffer overflow in ncurses library allows local users to execute arbitrary commands via long environmental information such as TERM or TERMINFO_DIRS. • http://www.calderasystems.com/support/security/advisories/CSSA-2000-036.0.txt •

CVSS: 7.8EPSS: 0%CPEs: 9EXPL: 2

29 Nov 2000 — Format string vulnerability in top program allows local attackers to gain root privileges via the "kill" or "renice" function. • https://www.exploit-db.com/exploits/20377 •