Page 8 of 108 results (0.007 seconds)

CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0

12 Feb 2001 — Buffer overflow in kdc_reply_cipher of libkrb (Kerberos 4 authentication library) in NetBSD 1.5 and FreeBSD 4.2 and earlier, as used in Kerberised applications such as telnetd and login, allows local users to gain root privileges. • ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:25.kerberosIV.asc •

CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 1

02 Feb 2001 — Vulnerability in telnetd in FreeBSD 1.5 allows local users to gain root privileges by modifying critical environmental variables that affect the behavior of telnetd. • https://www.exploit-db.com/exploits/409 •

CVSS: 9.1EPSS: 4%CPEs: 5EXPL: 1

29 Nov 2000 — FreeBSD 4.1.1 and earlier, and possibly other BSD-based OSes, uses an insufficient random number generator to generate initial TCP sequence numbers (ISN), which allows remote attackers to spoof TCP connections. • https://www.exploit-db.com/exploits/19522 •

CVSS: 5.5EPSS: 0%CPEs: 31EXPL: 0

29 May 2000 — The undocumented semconfig system call in BSD freezes the state of semaphores, which allows local users to cause a denial of service of the semaphore system by using the semconfig call. • ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:19.semconfig.asc •

CVSS: 7.8EPSS: 0%CPEs: 15EXPL: 0

04 Jan 2000 — Buffer overflow in FreeBSD fts library routines allows local user to modify arbitrary files via the periodic program. • http://www.osvdb.org/1074 •

CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 0

01 Jan 2000 — Buffer overflow in FreeBSD setlocale in the libc module allows attackers to execute arbitrary code via a long PATH_LOCALE environment variable. • http://www.osvdb.org/6086 •

CVSS: 7.5EPSS: 1%CPEs: 23EXPL: 0

30 Dec 1999 — ip_input.c in BSD-derived TCP/IP implementations allows remote attackers to cause a denial of service (crash or hang) via crafted packets. ip_input.c en implementaciones de TCP/IP derivadas de BSD permiten a atacantes remotos causar una denegación de servicio (cuelgue o caída) mediante paquetes artesanales. • http://www.openbsd.org/errata23.html#tcpfix • CWE-20: Improper Input Validation •

CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0

01 Dec 1999 — FreeBSD mount_union command allows local users to gain root privileges via a symlink attack. • http://www.osvdb.org/6088 •

CVSS: 7.5EPSS: 4%CPEs: 20EXPL: 2

15 Jul 1999 — Operating systems with shared memory implementations based on BSD 4.4 code allow a user to conduct a denial of service and bypass memory limits (e.g., as specified with rlimits) using mmap or shmget to allocate memory and cause page faults. • https://www.exploit-db.com/exploits/19423 •

CVSS: 7.8EPSS: 0%CPEs: 28EXPL: 2

18 Feb 1999 — A buffer overflow in lsof allows local users to obtain root privilege. • https://www.exploit-db.com/exploits/19373 •