Browse CVEs

MEDIUM 5.5 CVE-1999-0783 FreeBSD allows local users to conduct a denial of service by creating a hard link from a device special file to a file on an NFS file system. FreeBSD Mitigation only Fix from $1,6001998-06-16 HIGH 7.5 CVE-1999-0796 FreeBSD T/TCP Extensions for Transactions can be subjected to spoofing attacks. FreeBSD Mitigation only Fix from $1,9501998-05-01 HIGH 10.0 CVE-1999-0323 FreeBSD mmap function allows users to modify append-only or immutable files. FreeBSD Mitigation only Fix from $1,9501998-02-20 HIGH 7.2 CVE-1999-0304 mmap function in BSD allows local attackers in the kmem group to modify memory through devices. FreeBSD Mitigation only Fix from $1,9501998-02-01 MEDIUM 5.0 CVE-1999-0305 The system configuration control (sysctl) facility in BSD based operating systems OpenBSD 2.2 and earlier, and FreeBSD 2.2.5 and earlier, does not pr… FreeBSD Mitigation only Fix from $1,6001998-02-01 MEDIUM 5.0 CVE-1999-0513EPSS 70% ICMP messages to broadcast addresses are allowed, allowing for a Smurf attack that can cause a denial of service. FreeBSD Mitigation only Fix from $1,6001998-01-05 HIGH 7.5 CVE-1999-0017 FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce. FreeBSD Mitigation only Fix from $1,9501997-12-10 MEDIUM 5.1 CVE-1999-0061 File creation and deletion, and remote execution, in the BSD line printer daemon (lpd). FreeBSD Mitigation only Fix from $1,6001997-10-02 MEDIUM 6.4 CVE-1999-0074EPSS 8% Listening TCP ports are sequentially allocated, allowing spoofing attacks. FreeBSD Mitigation only Fix from $1,6001997-07-01 MEDIUM 5.0 CVE-1999-0628 The rwho/rwhod service is running, which exposes machine status and user information. FreeBSD Mitigation only Fix from $1,6001997-07-01 HIGH 7.5 CVE-1999-0037 Arbitrary command execution via metamail package using message headers, when user processes attacker's message using metamail. FreeBSD Mitigation only Fix from $1,9501997-05-21 HIGH 7.2 CVE-1999-0040 Buffer overflow in Xt library of X Windowing System allows local users to execute commands with root privileges. FreeBSD Mitigation only Fix from $1,9501997-05-01 HIGH 7.5 CVE-1999-1298 Sysinstall in FreeBSD 2.2.1 and earlier, when configuring anonymous FTP, creates the ftp user without a password and with /bin/date as the shell, whi… FreeBSD after 2.2.1 Fix from $1,9501997-04-07 HIGH 9.3 CVE-1999-0299 Buffer overflow in FreeBSD lpd through long DNS hostnames. FreeBSD Mitigation only Fix from $1,9501997-03-05 MEDIUM 5.0 CVE-1999-0345 Jolt ICMP attack causes a denial of service in Windows 95 and Windows NT systems. FreeBSD Mitigation only Fix from $1,6001997-01-01 HIGH 7.2 CVE-1999-1385 Buffer overflow in ppp program in FreeBSD 2.1 and earlier allows local users to gain privileges via a long HOME environment variable. FreeBSD after 2.1.0 Fix from $1,9501996-12-19 HIGH 7.2 CVE-1999-0297 Buffer overflow in Vixie Cron library up to version 3.0 allows local users to obtain root access via a long environmental variable. FreeBSD Mitigation only Fix from $1,9501996-12-12 MEDIUM 5.0 CVE-1999-0096 Sendmail decode alias can be used to overwrite sensitive files. FreeBSD Mitigation only Fix from $1,6001996-12-10 HIGH 7.2 CVE-1999-0130 Local users can start Sendmail in daemon mode and gain root privileges. FreeBSD Mitigation only Fix from $1,9501996-11-16 HIGH 7.2 CVE-1999-0032 Buffer overflow in lpr, as used in BSD-based systems including Linux, allows local users to execute arbitrary code as root via a long -C (classificat… FreeBSD Mitigation only Fix from $1,9501996-10-25 HIGH 7.2 CVE-1999-0131 Buffer overflow and denial of service in Sendmail 8.7.5 and earlier through GECOS field gives root access to local users. FreeBSD Mitigation only Fix from $1,9501996-09-11 HIGH 7.5 CVE-1999-0085 Buffer overflow in rwhod on AIX and other operating systems allows remote attackers to execute arbitrary code via a UDP packet with a long hostname. FreeBSD Mitigation only Fix from $1,9501996-08-21 HIGH 7.2 CVE-1999-0023 Local user gains root privileges via buffer overflow in rdist, via lookup() function. FreeBSD Mitigation only Fix from $1,9501996-07-24 HIGH 7.5 CVE-1999-1301 A design flaw in the Z-Modem protocol allows the remote sender of a file to execute arbitrary programs on the client, as implemented in rz in the rzs… FreeBSD after 2.1.5 Fix from $1,9501996-07-16 HIGH 7.8 CVE-1999-0022 Local user gains root privileges via buffer overflow in rdist, via expstr() function. FreeBSD Mitigation only Fix from $1,9501996-07-03 HIGH 7.2 CVE-1999-0138 The suidperl and sperl program do not give up root privileges when changing UIDs back to the original users, allowing root access. FreeBSD Mitigation only Fix from $1,9501996-06-26 HIGH 7.5 CVE-2000-0388 Buffer overflow in FreeBSD libmytinfo library allows local users to execute commands via a long TERMCAP environmental variable. FreeBSD Mitigation only Fix from $1,9501990-05-09