Buffer overflow in bootpd on OpenBSD, FreeBSD, and Linux systems via a malformed header type.
KDE allows local users to execute arbitrary commands by setting the KDEDIR environmental variable to modify the search path that KDE uses to locate i…
Vacation program allows command execution by remote users through a sendmail command.
IP fragmentation denial of service in FreeBSD allows a remote attacker to cause a crash.
TCP RST denial of service in FreeBSD.
FreeBSD allows local users to conduct a denial of service by creating a hard link from a device special file to a file on an NFS file system.
FreeBSD T/TCP Extensions for Transactions can be subjected to spoofing attacks.
FreeBSD mmap function allows users to modify append-only or immutable files.
mmap function in BSD allows local attackers in the kmem group to modify memory through devices.
The system configuration control (sysctl) facility in BSD based operating systems OpenBSD 2.2 and earlier, and FreeBSD 2.2.5 and earlier, does not pr…
ICMP messages to broadcast addresses are allowed, allowing for a Smurf attack that can cause a denial of service.
FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce.
File creation and deletion, and remote execution, in the BSD line printer daemon (lpd).
Listening TCP ports are sequentially allocated, allowing spoofing attacks.
The rwho/rwhod service is running, which exposes machine status and user information.
Arbitrary command execution via metamail package using message headers, when user processes attacker's message using metamail.
Buffer overflow in Xt library of X Windowing System allows local users to execute commands with root privileges.
Buffer overflow in FreeBSD lpd through long DNS hostnames.
Jolt ICMP attack causes a denial of service in Windows 95 and Windows NT systems.
Buffer overflow in Vixie Cron library up to version 3.0 allows local users to obtain root access via a long environmental variable.
Sendmail decode alias can be used to overwrite sensitive files.
Local users can start Sendmail in daemon mode and gain root privileges.
Buffer overflow in lpr, as used in BSD-based systems including Linux, allows local users to execute arbitrary code as root via a long -C (classificat…
Buffer overflow and denial of service in Sendmail 8.7.5 and earlier through GECOS field gives root access to local users.
Buffer overflow in rwhod on AIX and other operating systems allows remote attackers to execute arbitrary code via a UDP packet with a long hostname.
Local user gains root privileges via buffer overflow in rdist, via lookup() function.
Local user gains root privileges via buffer overflow in rdist, via expstr() function.
The suidperl and sperl program do not give up root privileges when changing UIDs back to the original users, allowing root access.
Buffer overflow in FreeBSD libmytinfo library allows local users to execute commands via a long TERMCAP environmental variable.