Page 31 of 330 results (0.015 seconds)

CVSS: 9.8EPSS: 9%CPEs: 9EXPL: 1

13 Oct 2000 — mopd (Maintenance Operations Protocol loader daemon) does not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary commands. • https://www.exploit-db.com/exploits/26630 •

CVSS: 9.8EPSS: 0%CPEs: 9EXPL: 0

13 Oct 2000 — Buffer overflow in mopd (Maintenance Operations Protocol loader daemon) allows remote attackers to execute arbitrary commands via a long file name. • http://archives.neohapsis.com/archives/bugtraq/2000-08/0064.html •

CVSS: 9.8EPSS: 10%CPEs: 20EXPL: 1

07 Jul 2000 — FTP servers such as OpenBSD ftpd, NetBSD ftpd, ProFTPd and Opieftpd do not properly cleanse untrusted format strings that are used in the setproctitle function (sometimes called by set_proc_title), which allows remote attackers to cause a denial of service or execute arbitrary commands. • https://www.exploit-db.com/exploits/396 •

CVSS: 10.0EPSS: 0%CPEs: 3EXPL: 0

08 Jun 2000 — OpenSSH does not properly drop privileges when the UseLogin option is enabled, which allows local users to execute arbitrary commands by providing the command to the ssh daemon. • http://archives.neohapsis.com/archives/bugtraq/2000-06/0065.html •

CVSS: 9.8EPSS: 0%CPEs: 46EXPL: 0

24 Feb 2000 — The default configuration of SSH allows X forwarding, which could allow a remote attacker to control a client's X sessions via a malicious xauth program. • http://www.securityfocus.com/bid/1006 •

CVSS: 9.8EPSS: 0%CPEs: 30EXPL: 0

11 Feb 2000 — The SSH protocol server sshd allows local users without shell access to redirect a TCP connection through a service that uses the standard system password database for authentication, such as POP or FTP. • https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0143 •

CVSS: 6.2EPSS: 0%CPEs: 3EXPL: 0

19 Jan 2000 — The BSD make program allows local users to modify files via a symlink attack when the -j option is being used. • ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:01.make.asc •

CVSS: 7.5EPSS: 0%CPEs: 23EXPL: 0

30 Dec 1999 — ip_input.c in BSD-derived TCP/IP implementations allows remote attackers to cause a denial of service (crash or hang) via crafted packets. ip_input.c en implementaciones de TCP/IP derivadas de BSD permiten a atacantes remotos causar una denegación de servicio (cuelgue o caída) mediante paquetes artesanales. • http://www.openbsd.org/errata23.html#tcpfix • CWE-20: Improper Input Validation •

CVSS: 9.1EPSS: 0%CPEs: 1EXPL: 0

14 Dec 1999 — An SSH 1.2.27 server allows a client to use the "none" cipher, even if it is not allowed by the server policy. • http://marc.info/?l=bugtraq&m=94519142415338&w=2 •

CVSS: 7.5EPSS: 0%CPEs: 20EXPL: 1

05 Sep 1999 — FreeBSD, NetBSD, and OpenBSD allow an attacker to cause a denial of service by creating a large number of socket pairs using the socketpair function, setting a large buffer size via setsockopt, then writing large buffers. • https://www.exploit-db.com/exploits/19488 •