CVE-2000-0312
https://notcve.org/view.php?id=CVE-2000-0312
cron in OpenBSD 2.5 allows local users to gain root privileges via an argv[] that is not NULL terminated, which is passed to cron's fake popen function. • http://www.openbsd.org/errata25.html#cron •
CVE-2001-0053 – OpenBSD ftpd 2.6/2.7 - Remote Overflow
https://notcve.org/view.php?id=CVE-2001-0053
One-byte buffer overflow in replydirname function in BSD-based ftpd allows remote attackers to gain root privileges. • https://www.exploit-db.com/exploits/234 https://www.exploit-db.com/exploits/20512 ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-018.txt.asc http://archives.neohapsis.com/archives/bugtraq/2000-12/0275.html http://www.openbsd.org/advisories/ftpd_replydirname.txt http://www.securityfocus.com/bid/2124 https://exchange.xforce.ibmcloud.com/vulnerabilities/5776 •
CVE-2000-0994 – OpenBSD 2.x - 'fstat' Format String
https://notcve.org/view.php?id=CVE-2000-0994
Format string vulnerability in OpenBSD fstat program (and possibly other BSD-based operating systems) allows local users to gain root privileges via the PWD environmental variable. • https://www.exploit-db.com/exploits/20256 ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.7/common/028_format_strings.patch http://marc.info/?l=bugtraq&m=97068555106135&w=2 http://www.securityfocus.com/bid/1746 https://exchange.xforce.ibmcloud.com/vulnerabilities/5338 •
CVE-2000-0993 – BSD chpass - 'pw_error' Local Privilege Escalation
https://notcve.org/view.php?id=CVE-2000-0993
Format string vulnerability in pw_error function in BSD libutil library allows local users to gain root privileges via a malformed password in commands such as chpass or passwd. • https://www.exploit-db.com/exploits/243 ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:58.chpass.asc ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-015.txt.asc http://marc.info/?l=bugtraq&m=97068555106135&w=2 http://www.openbsd.org/errata27.html#pw_error http://www.securityfocus.com/bid/1744 https://exchange.xforce.ibmcloud.com/vulnerabilities/5339 •
CVE-2000-0914 – OpenBSD 2.x - Pending ARP Request Remote Denial of Service
https://notcve.org/view.php?id=CVE-2000-0914
OpenBSD 2.6 and earlier allows remote attackers to cause a denial of service by flooding the server with ARP requests. • https://www.exploit-db.com/exploits/20271 http://archives.neohapsis.com/archives/bugtraq/2000-10/0078.html http://www.osvdb.org/1592 http://www.securityfocus.com/bid/1759 https://exchange.xforce.ibmcloud.com/vulnerabilities/5340 •