Browse CVEs

HIGH 7.8 CVE-2006-6165 ld.so in FreeBSD, NetBSD, and possibly other BSD distributions does not remove certain harmful environment variables, which allows local users to gai… FreeBSD Mitigation only Fix from $1,9502006-11-29 MEDIUM 5.0 CVE-2006-5680 The libarchive library in FreeBSD 6-STABLE after 2006-09-05 and before 2006-11-08 allows context-dependent attackers to cause a denial of service (CP… FreeBSD No fix yet Fix from $1,6002006-11-09 MEDIUM 6.4 CVE-2006-2654 Directory traversal vulnerability in smbfs smbfs on FreeBSD 4.10 up to 6.1 allows local users to escape chroot restrictions for an SMB-mounted filesy… FreeBSD Mitigation only Fix from $1,6002006-06-02 HIGH 7.8 CVE-2006-0900EPSS 65% nfsd in FreeBSD 6.0 kernel allows remote attackers to cause a denial of service via a crafted NFS mount request, as demonstrated by the ProtoVer NFS … FreeBSD Mitigation only Fix from $1,9502006-02-27 HIGH 7.2 CVE-2005-2218 The device file system (devfs) in FreeBSD 5.x does not properly check parameters of the node type when creating a device node, which makes hidden dev… FreeBSD Mitigation only Fix from $1,9502005-07-26 MEDIUM 5.0 CVE-2005-2019 ipfw in FreeBSD 5.4, when running on Symmetric Multi-Processor (SMP) or Uni Processor (UP) systems with the PREEMPTION kernel option enabled, does no… FreeBSD Mitigation only Fix from $1,6002005-07-05 MEDIUM 5.0 CVE-2005-2068 FreeBSD 4.x through 4.11 and 5.x through 5.4 allows remote attackers to modify certain TCP options via a TCP packet with the SYN flag set for an alre… FreeBSD Mitigation only Fix from $1,6002005-07-05 HIGH 10.0 CVE-2005-0708 The sendfile system call in FreeBSD 4.8 through 4.11 and 5 through 5.4 can transfer portions of kernel memory if a file is truncated while it is bein… FreeBSD Mitigation only Fix from $1,9502005-05-02 HIGH 7.2 CVE-2003-1474 slashem-tty in the FreeBSD Ports Collection is installed with write permissions for the games group, which allows local users with group games privil… Slashem Tty Mitigation only Fix from $1,9502003-12-31 MEDIUM 5.0 CVE-2003-0804 The arplookup function in FreeBSD 5.1 and earlier, Mac OS X before 10.2.8, and possibly other BSD-based systems, allows remote attackers on a local s… FreeBSD Mitigation only Fix from $1,6002003-11-17 MEDIUM 5.0 CVE-2003-0001EPSS 73% Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows remote attackers to obtain information … FreeBSD Mitigation only Fix from $1,6002003-01-17 MEDIUM 5.5 CVE-2002-1915 tip on multiple BSD-based operating systems allows local users to cause a denial of service (execution prevention) by using flock() to lock the /var/… FreeBSD Mitigation only Fix from $1,6002002-12-31 MEDIUM 5.0 CVE-2002-0666 IPSEC implementations including (1) FreeS/WAN and (2) KAME do not properly calculate the length of authentication data, which allows remote attackers… FreeBSD No fix yet Fix from $1,6002002-11-04 HIGH 7.2 CVE-2002-0820 FreeBSD kernel 4.6 and earlier closes the file descriptors 0, 1, and 2 after they have already been assigned to /dev/null when the descriptors refere… FreeBSD Mitigation only Fix from $1,9502002-08-12 MEDIUM 6.9 CVE-2002-0824 BSD pppd allows local users to change the permissions of arbitrary files via a symlink attack on a file that is specified as a tty device. Point To Point Protocol Daemon Mitigation only Fix from $1,6002002-08-12 HIGH 7.2 CVE-2001-1034 Format string vulnerability in Hylafax on FreeBSD allows local users to execute arbitrary code via format specifiers in the -h hostname argument for … FreeBSD Mitigation only Fix from $1,9502001-09-23 MEDIUM 5.0 CVE-2001-1244EPSS 21% Multiple TCP implementations could allow remote attackers to cause a denial of service (bandwidth and CPU exhaustion) by setting the maximum segment … FreeBSD No fix yet Fix from $1,6002001-07-07 HIGH 7.2 CVE-2001-0093 Vulnerability in telnetd in FreeBSD 1.5 allows local users to gain root privileges by modifying critical environmental variables that affect the beha… FreeBSD Mitigation only Fix from $1,9502001-02-12 HIGH 7.2 CVE-1999-0761 Buffer overflow in FreeBSD fts library routines allows local user to modify arbitrary files via the periodic program. FreeBSD Mitigation only Fix from $1,9502000-09-16 MEDIUM 5.0 CVE-2000-0594EPSS 10% BitchX IRC client does not properly cleanse an untrusted format string, which allows remote attackers to cause a denial of service via an invite to a… FreeBSD Mitigation only Fix from $1,6002000-07-04 HIGH 7.2 CVE-1999-1008 xsoldier program allows local users to gain root access via a long argument. FreeBSD No fix yet Fix from $1,9502000-05-17 MEDIUM 5.0 CVE-2000-0440 NetBSD 1.4.2 and earlier allows remote attackers to cause a denial of service by sending a packet with an unaligned IP timestamp option. FreeBSD Mitigation only Fix from $1,6002000-05-01 HIGH 7.2 CVE-2000-0235 Buffer overflow in the huh program in the orville-write package allows local users to gain root privileges. FreeBSD Mitigation only Fix from $1,9502000-03-27 HIGH 7.2 CVE-2000-0186 Buffer overflow in the dump utility in the Linux ext2fs backup package allows local users to gain privileges via a long command line argument. FreeBSD Mitigation only Fix from $1,9502000-02-28 MEDIUM 6.2 CVE-2000-0092 The BSD make program allows local users to modify files via a symlink attack when the -j option is being used. FreeBSD Mitigation only Fix from $1,6002000-01-19 HIGH 7.2 CVE-1999-0964 Buffer overflow in FreeBSD setlocale in the libc module allows attackers to execute arbitrary code via a long PATH_LOCALE environment variable. FreeBSD Mitigation only Fix from $1,9502000-01-01 MEDIUM 5.0 CVE-1999-0001 ip_input.c in BSD-derived TCP/IP implementations allows remote attackers to cause a denial of service (crash or hang) via crafted packets. FreeBSD No fix yet Fix from $1,6001999-12-30 HIGH 7.2 CVE-1999-0855 Buffer overflow in FreeBSD gdc program. FreeBSD No fix yet Fix from $1,9501999-12-01 HIGH 7.2 CVE-1999-0963 FreeBSD mount_union command allows local users to gain root privileges via a symlink attack. FreeBSD Mitigation only Fix from $1,9501999-12-01 HIGH 9.3 CVE-1999-0704 Buffer overflow in Berkeley automounter daemon (amd) logging facility provided in the Linux am-utils package and others. FreeBSD Mitigation only Fix from $1,9501999-09-16