Browse CVEs

MEDIUM 5.0 CVE-2000-0915 fingerd in FreeBSD 4.1.1 allows remote attackers to read arbitrary files by specifying the target file name instead of a regular user name. FreeBSD Patch available Fix from $1,6002000-12-19 HIGH 7.2 CVE-2000-0998 Format string vulnerability in top program allows local attackers to gain root privileges via the "kill" or "renice" function. FreeBSD Patch available Fix from $1,9502000-12-11 HIGH 7.2 CVE-2000-1011 Buffer overflow in catopen() function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to gain root privileges via a long envi… FreeBSD Patch available Fix from $1,9502000-12-11 HIGH 7.2 CVE-2000-1012 The catopen function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to read arbitrary files via the LANG environmental varia… FreeBSD Patch available Fix from $1,9502000-12-11 HIGH 7.2 CVE-2000-1013 The setlocale function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to read arbitrary files via the LANG environmental var… FreeBSD Patch available Fix from $1,9502000-12-11 MEDIUM 5.0 CVE-2000-1066 The getnameinfo function in FreeBSD 4.1.1 and earlier, and possibly other operating systems, allows a remote attacker to cause a denial of service vi… FreeBSD Patch available Fix from $1,6002000-12-11 HIGH 7.2 CVE-2000-0852 Multiple buffer overflows in eject on FreeBSD and possibly other OSes allows local users to gain root privileges. FreeBSD Patch available Fix from $1,9502000-11-14 HIGH 7.2 CVE-2000-0749 Buffer overflow in the Linux binary compatibility module in FreeBSD 3.x through 5.x allows local users to gain root privileges via long filenames in … FreeBSD Patch available Fix from $1,9502000-10-20 HIGH 7.2 CVE-2000-0752 Buffer overflows in brouted in FreeBSD and possibly other OSes allows local users to gain root privileges via long command line arguments. FreeBSD Patch available Fix from $1,9502000-10-20 HIGH 7.2 CVE-1999-0761 Buffer overflow in FreeBSD fts library routines allows local user to modify arbitrary files via the periodic program. FreeBSD Mitigation only Fix from $1,9502000-09-16 MEDIUM 5.0 CVE-2000-0594EPSS 10% BitchX IRC client does not properly cleanse an untrusted format string, which allows remote attackers to cause a denial of service via an invite to a… FreeBSD Mitigation only Fix from $1,6002000-07-04 HIGH 7.5 CVE-2000-0532 A FreeBSD patch for SSH on 2000-01-14 configures ssh to listen on port 722 as well as port 22, which might allow remote attackers to access SSH throu… FreeBSD Patch available Fix from $1,9502000-06-07 HIGH 7.2 CVE-1999-1008 xsoldier program allows local users to gain root access via a long argument. FreeBSD No fix yet Fix from $1,9502000-05-17 MEDIUM 5.0 CVE-2000-0440 NetBSD 1.4.2 and earlier allows remote attackers to cause a denial of service by sending a packet with an unaligned IP timestamp option. FreeBSD Mitigation only Fix from $1,6002000-05-01 HIGH 7.2 CVE-2000-0235 Buffer overflow in the huh program in the orville-write package allows local users to gain root privileges. FreeBSD Mitigation only Fix from $1,9502000-03-27 HIGH 7.2 CVE-2000-0186 Buffer overflow in the dump utility in the Linux ext2fs backup package allows local users to gain privileges via a long command line argument. FreeBSD Mitigation only Fix from $1,9502000-02-28 MEDIUM 6.2 CVE-2000-0092 The BSD make program allows local users to modify files via a symlink attack when the -j option is being used. FreeBSD Mitigation only Fix from $1,6002000-01-19 HIGH 7.2 CVE-1999-0964 Buffer overflow in FreeBSD setlocale in the libc module allows attackers to execute arbitrary code via a long PATH_LOCALE environment variable. FreeBSD Mitigation only Fix from $1,9502000-01-01 MEDIUM 5.0 CVE-1999-1339 Vulnerability when Network Address Translation (NAT) is enabled in Linux 2.2.10 and earlier with ipchains, or FreeBSD 3.2 with ipfw, allows remote at… FreeBSD after 2.2.10 Fix from $1,6001999-12-31 MEDIUM 5.0 CVE-1999-0001 ip_input.c in BSD-derived TCP/IP implementations allows remote attackers to cause a denial of service (crash or hang) via crafted packets. FreeBSD No fix yet Fix from $1,6001999-12-30 HIGH 7.2 CVE-1999-0855 Buffer overflow in FreeBSD gdc program. FreeBSD No fix yet Fix from $1,9501999-12-01 HIGH 7.2 CVE-1999-0963 FreeBSD mount_union command allows local users to gain root privileges via a symlink attack. FreeBSD Mitigation only Fix from $1,9501999-12-01 HIGH 7.2 CVE-1999-1517 runtar in the Amanda backup system used in various UNIX operating systems executes tar with root privileges, which allows a user to overwrite or read… FreeBSD Patch available Fix from $1,9501999-11-01 HIGH 9.3 CVE-1999-0704 Buffer overflow in Berkeley automounter daemon (amd) logging facility provided in the Linux am-utils package and others. FreeBSD Mitigation only Fix from $1,9501999-09-16 MEDIUM 5.0 CVE-1999-1518 Operating systems with shared memory implementations based on BSD 4.4 code allow a user to conduct a denial of service and bypass memory limits (e.g.… FreeBSD Patch available Fix from $1,6001999-07-15 HIGH 10.0 CVE-1999-0798 Buffer overflow in bootpd on OpenBSD, FreeBSD, and Linux systems via a malformed header type. FreeBSD Mitigation only Fix from $1,9501998-12-04 HIGH 7.2 CVE-1999-0781 KDE allows local users to execute arbitrary commands by setting the KDEDIR environmental variable to modify the search path that KDE uses to locate i… FreeBSD Mitigation only Fix from $1,9501998-11-18 HIGH 7.5 CVE-1999-0057EPSS 8% Vacation program allows command execution by remote users through a sendmail command. FreeBSD Mitigation only Fix from $1,9501998-11-16 HIGH 7.5 CVE-1999-0052 IP fragmentation denial of service in FreeBSD allows a remote attacker to cause a crash. FreeBSD Mitigation only Fix from $1,9501998-11-04 MEDIUM 5.0 CVE-1999-0053 TCP RST denial of service in FreeBSD. FreeBSD No fix yet Fix from $1,6001998-10-13