FreeBSD allows local users to conduct a denial of service by creating a hard link from a device special file to a file on an NFS file system.
FreeBSD T/TCP Extensions for Transactions can be subjected to spoofing attacks.
FreeBSD mmap function allows users to modify append-only or immutable files.
mmap function in BSD allows local attackers in the kmem group to modify memory through devices.
The system configuration control (sysctl) facility in BSD based operating systems OpenBSD 2.2 and earlier, and FreeBSD 2.2.5 and earlier, does not pr…
ICMP messages to broadcast addresses are allowed, allowing for a Smurf attack that can cause a denial of service.
FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce.
File creation and deletion, and remote execution, in the BSD line printer daemon (lpd).
Listening TCP ports are sequentially allocated, allowing spoofing attacks.
The rwho/rwhod service is running, which exposes machine status and user information.
Arbitrary command execution via metamail package using message headers, when user processes attacker's message using metamail.
Buffer overflow in Xt library of X Windowing System allows local users to execute commands with root privileges.
Sysinstall in FreeBSD 2.2.1 and earlier, when configuring anonymous FTP, creates the ftp user without a password and with /bin/date as the shell, whi…
Buffer overflow in FreeBSD lpd through long DNS hostnames.
Jolt ICMP attack causes a denial of service in Windows 95 and Windows NT systems.
Buffer overflow in ppp program in FreeBSD 2.1 and earlier allows local users to gain privileges via a long HOME environment variable.
Buffer overflow in Vixie Cron library up to version 3.0 allows local users to obtain root access via a long environmental variable.
Sendmail decode alias can be used to overwrite sensitive files.
Local users can start Sendmail in daemon mode and gain root privileges.
Buffer overflow in lpr, as used in BSD-based systems including Linux, allows local users to execute arbitrary code as root via a long -C (classificat…
Buffer overflow and denial of service in Sendmail 8.7.5 and earlier through GECOS field gives root access to local users.
Buffer overflow in rwhod on AIX and other operating systems allows remote attackers to execute arbitrary code via a UDP packet with a long hostname.
Local user gains root privileges via buffer overflow in rdist, via lookup() function.
A design flaw in the Z-Modem protocol allows the remote sender of a file to execute arbitrary programs on the client, as implemented in rz in the rzs…
Local user gains root privileges via buffer overflow in rdist, via expstr() function.
The suidperl and sperl program do not give up root privileges when changing UIDs back to the original users, allowing root access.
Buffer overflow in FreeBSD libmytinfo library allows local users to execute commands via a long TERMCAP environmental variable.