Page 7 of 85 results (0.018 seconds)

CVSS: 6.5EPSS: 0%CPEs: 4EXPL: 0

28 May 2000 — ftpd in NetBSD 1.4.2 does not properly parse entries in /etc/ftpchroot and does not chroot the specified users, which allows those users to access other files outside of their home directory. • ftp://ftp.netbsd.org/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-006.txt.asc •

CVSS: 7.5EPSS: 4%CPEs: 5EXPL: 1

01 May 2000 — NetBSD 1.4.2 and earlier allows remote attackers to cause a denial of service by sending a packet with an unaligned IP timestamp option. • https://www.exploit-db.com/exploits/19896 •

CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 1

16 Feb 2000 — procfs in BSD systems allows local users to gain root privileges by modifying the /proc/pid/mem interface via a modified file descriptor for stderr. • https://www.exploit-db.com/exploits/19726 •

CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0

01 Feb 2000 — NetBSD ptrace call on VAX allows local users to gain privileges by modifying the PSL contents in the debugging process. • ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA1999-012.txt.asc •

CVSS: 6.2EPSS: 0%CPEs: 3EXPL: 0

19 Jan 2000 — The BSD make program allows local users to modify files via a symlink attack when the -j option is being used. • ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:01.make.asc •

CVSS: 7.5EPSS: 0%CPEs: 20EXPL: 1

05 Sep 1999 — FreeBSD, NetBSD, and OpenBSD allow an attacker to cause a denial of service by creating a large number of socket pairs using the socketpair function, setting a large buffer size via setsockopt, then writing large buffers. • https://www.exploit-db.com/exploits/19488 •

CVSS: 7.2EPSS: 0%CPEs: 27EXPL: 2

09 Aug 1999 — The BSD profil system call allows a local user to modify the internal data space of a program via profiling and execve. • https://www.exploit-db.com/exploits/19447 •

CVSS: 7.5EPSS: 4%CPEs: 20EXPL: 2

15 Jul 1999 — Operating systems with shared memory implementations based on BSD 4.4 code allow a user to conduct a denial of service and bypass memory limits (e.g., as specified with rlimits) using mmap or shmget to allocate memory and cause page faults. • https://www.exploit-db.com/exploits/19423 •

CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0

01 May 1999 — NetBSD on a multi-homed host allows ARP packets on one network to modify ARP entries on another connected network. • http://www.osvdb.org/6540 •

CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0

01 May 1999 — NetBSD allows ARP packets to overwrite static ARP entries. • http://www.osvdb.org/6539 •