Browse CVEs

HIGH 7.1 CVE-2004-1471EPSS 8% Format string vulnerability in wrapper.c in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16 allows remote attackers with CVSROOT commit access … FreeBSD Patch available Fix from $1,9502004-12-31 HIGH 7.2 CVE-2004-0125 The jail system call in FreeBSD 4.x before 4.10-RELEASE does not verify that an attempt to manipulate routing tables originated from a non-jailed pro… FreeBSD Patch available Fix from $1,9502004-08-06 MEDIUM 5.0 CVE-2004-0171 FreeBSD 5.1 and earlier, and Mac OS X before 10.3.4, allows remote attackers to cause a denial of service (resource exhaustion of memory buffers and … FreeBSD Patch available Fix from $1,6002004-03-15 HIGH 10.0 CVE-2004-0002 The TCP MSS (maximum segment size) functionality in netinet allows remote attackers to cause a denial of service (resource exhaustion) via (1) a low … FreeBSD Patch available Fix from $1,9502004-03-03 HIGH 7.2 CVE-2003-1474 slashem-tty in the FreeBSD Ports Collection is installed with write permissions for the games group, which allows local users with group games privil… Slashem Tty Mitigation only Fix from $1,9502003-12-31 MEDIUM 5.0 CVE-2003-0804 The arplookup function in FreeBSD 5.1 and earlier, Mac OS X before 10.2.8, and possibly other BSD-based systems, allows remote attackers on a local s… FreeBSD Mitigation only Fix from $1,6002003-11-17 HIGH 10.0 CVE-2003-0694EPSS 66% The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the pars… FreeBSD Patch available Fix from $1,9502003-10-06 HIGH 7.2 CVE-2003-0144 Buffer overflow in the lprm command in the lprold lpr package on SuSE 7.1 through 7.3, OpenBSD 3.2 and earlier, and possibly other operating systems,… FreeBSD Patch available Fix from $1,9502003-03-31 HIGH 7.5 CVE-2003-0028EPSS 15% Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived from SunRPC… FreeBSD Patch available Fix from $1,9502003-03-25 HIGH 7.5 CVE-2003-0015EPSS 24% Double-free vulnerability in CVS 1.11.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a ma… FreeBSD Patch available Fix from $1,9502003-02-07 MEDIUM 5.0 CVE-2003-0001EPSS 73% Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows remote attackers to obtain information … FreeBSD Mitigation only Fix from $1,6002003-01-17 MEDIUM 5.5 CVE-2002-1915 tip on multiple BSD-based operating systems allows local users to cause a denial of service (execution prevention) by using flock() to lock the /var/… FreeBSD Mitigation only Fix from $1,6002002-12-31 MEDIUM 5.1 CVE-2002-2222 isakmpd/message.c in isakmpd in FreeBSD before isakmpd-20020403_1, and in OpenBSD 3.1, allows remote attackers to cause a denial of service (crash) b… Ports Collection after 2002-08-28 Fix from $1,6002002-12-31 HIGH 7.5 CVE-2002-1219EPSS 12% Buffer overflow in named in BIND 4 versions 4.9.10 and earlier, and 8 versions 8.3.3 and earlier, allows remote attackers to execute arbitrary code v… FreeBSD Patch available Fix from $1,9502002-11-29 MEDIUM 5.0 CVE-2002-1220EPSS 10% BIND 8.3.x through 8.3.3 allows remote attackers to cause a denial of service (termination due to assertion failure) via a request for a subdomain th… FreeBSD Patch available Fix from $1,6002002-11-29 MEDIUM 5.0 CVE-2002-1221EPSS 8% BIND 8.x through 8.3.3 allows remote attackers to cause a denial of service (crash) via SIG RR elements with invalid expiry times, which are removed … FreeBSD Patch available Fix from $1,6002002-11-29 MEDIUM 5.0 CVE-2002-0666 IPSEC implementations including (1) FreeS/WAN and (2) KAME do not properly calculate the length of authentication data, which allows remote attackers… FreeBSD No fix yet Fix from $1,6002002-11-04 CRITICAL 9.8 CVE-2002-0391EPSS 58% Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including dietlibc, a… FreeBSD after 4.6.1 Fix from $2,3002002-08-12 HIGH 7.5 CVE-2002-0414 KAME-derived implementations of IPsec on NetBSD 1.5.2, FreeBSD 4.5, and other operating systems, does not properly consult the Security Policy Databa… FreeBSD Patch available Fix from $1,9502002-08-12 HIGH 7.2 CVE-2002-0754 Kerberos 5 su (k5su) in FreeBSD 4.4 and earlier relies on the getlogin system call to determine if the user running k5su is root, which could allow a… Heimdal Patch available Fix from $1,9502002-08-12 HIGH 7.2 CVE-2002-0755 Kerberos 5 su (k5su) in FreeBSD 4.5 and earlier does not verify that a user is a member of the wheel group before granting superuser privileges, whic… FreeBSD Patch available Fix from $1,9502002-08-12 HIGH 7.2 CVE-2002-0820 FreeBSD kernel 4.6 and earlier closes the file descriptors 0, 1, and 2 after they have already been assigned to /dev/null when the descriptors refere… FreeBSD Mitigation only Fix from $1,9502002-08-12 MEDIUM 6.9 CVE-2002-0824 BSD pppd allows local users to change the permissions of arbitrary files via a symlink attack on a file that is specified as a tty device. Point To Point Protocol Daemon Mitigation only Fix from $1,6002002-08-12 MEDIUM 5.0 CVE-2002-0518 The SYN cache (syncache) and SYN cookie (syncookie) mechanism in FreeBSD 4.5 and earlier allows remote attackers to cause a denial of service (crash)… FreeBSD Patch available Fix from $1,6002002-08-12 MEDIUM 5.0 CVE-2002-0794 The accept_filter mechanism in FreeBSD 4 through 4.5 does not properly remove entries from the incomplete listen queue when adding a syncache, which … FreeBSD Patch available Fix from $1,6002002-08-12 MEDIUM 5.0 CVE-2002-0830 Network File System (NFS) in FreeBSD 4.6.1 RELEASE-p7 and earlier, NetBSD 1.5.3 and earlier, and possibly other operating systems, allows remote atta… FreeBSD after 4.6.1 Fix from $1,6002002-08-12 HIGH 7.2 CVE-2002-0572 FreeBSD 4.5 and earlier, and possibly other BSD-based operating systems, allows local users to write to or read from restricted files by closing the … FreeBSD Patch available Fix from $1,9502002-07-03 MEDIUM 5.0 CVE-2002-0574 Memory leak in FreeBSD 4.5 and earlier allows remote attackers to cause a denial of service (memory exhaustion) via ICMP echo packets that trigger a … FreeBSD after 4.5 Fix from $1,6002002-07-03 MEDIUM 5.0 CVE-2002-0381 The TCP implementation in various BSD operating systems (tcp_input.c) does not properly block connections to broadcast addresses, which could allow r… FreeBSD after 4.5 Fix from $1,6002002-06-25 MEDIUM 6.2 CVE-2001-1185 Some AIO operations in FreeBSD 4.4 may be delayed until after a call to execve, which could allow a local user to overwrite memory of the new process… FreeBSD Patch available Fix from $1,6002001-12-10