Browse CVEs

HIGH 7.8 CVE-2016-6253 mail.local in NetBSD versions 6.0 through 6.0.6, 6.1 through 6.1.5, and 7.0 allows local users to change ownership of or append data to arbitrary fil… Netbsd No fix yet Fix from $1,9502017-01-20 CRITICAL 9.8 CVE-2015-8212 CGI handling flaw in bozohttpd in NetBSD 6.0 through 6.0.6, 6.1 through 6.1.5, and 7.0 allows remote attackers to execute arbitrary code via crafted … Netbsd Mitigation only Fix from $2,3002017-01-19 MEDIUM 5.0 CVE-2015-5917 The glob implementation in tnftpd (formerly lukemftpd), as used in Apple OS X before 10.11, allows remote attackers to cause a denial of service (mem… Tnftpd No fix yet Fix from $1,6002015-10-09 MEDIUM 6.8 CVE-2011-1547EPSS 5% Multiple stack consumption vulnerabilities in the kernel in NetBSD 4.0, 5.0 before 5.0.3, and 5.1 before 5.1.1, when IPsec is enabled, allow remote a… Netbsd Mitigation only Fix from $1,6002011-05-09 MEDIUM 6.9 CVE-2009-2482 The pam_unix module in OpenPAM in NetBSD 4.0 before 4.0.2 and 5.0 before 5.0.1 allows local users to change the current root password if it is alread… Netbsd Mitigation only Fix from $1,6002009-07-16 HIGH 9.3 CVE-2008-3584 NetBSD 3.0, 3.1, and 4.0, when a pppoe instance exists, does not properly check the length of a PPPoE packet tag, which allows remote attackers to ca… Netbsd Mitigation only Fix from $1,9502008-09-11 HIGH 7.5 CVE-2007-1523 Heap-based buffer overflow in the kernel in NetBSD 3.0, certain versions of FreeBSD and OpenBSD, and possibly other BSD derived operating systems all… Netbsd No fix yet Fix from $1,9502007-03-20 MEDIUM 6.6 CVE-2006-6730 OpenBSD and NetBSD permit usermode code to kill the display server and write to the X.Org /dev/xf86 device, which allows local users with root privil… Netbsd Mitigation only Fix from $1,6002006-12-26 HIGH 7.2 CVE-2004-1374 Multiple buffer overflows in NetBSD kernel may allow local users to execute arbitrary code and gain privileges. Netbsd No fix yet Fix from $1,9502004-12-18 MEDIUM 5.0 CVE-2003-0653 The OSI networking kernel (sys/netiso) in NetBSD 1.6.1 and earlier does not use a BSD-required "PKTHDR" mbuf when sending certain error responses to … Netbsd Mitigation only Fix from $1,6002003-08-27 MEDIUM 5.0 CVE-2002-2245 ftpd in NetBSD 1.5 through 1.5.3 and 1.6 does not properly quote a digit in response to a STAT command for a filename that contains a carriage return… Ftpd Mitigation only Fix from $1,6002002-12-31 HIGH 7.5 CVE-2002-1194 Buffer overflow in talkd on NetBSD 1.6 and earlier, and possibly other operating systems, may allow remote attackers to execute arbitrary code via a … Netbsd Mitigation only Fix from $1,9502002-10-28 HIGH 7.2 CVE-2001-1091 The (1) dump and (2) dump_lfs commands in NetBSD 1.4.x through 1.5.1 do not properly drop privileges, which could allow local users to gain privilege… Netbsd Mitigation only Fix from $1,9502001-08-23 HIGH 7.2 CVE-2000-0094 procfs in BSD systems allows local users to gain root privileges by modifying the /proc/pid/mem interface via a modified file descriptor for stderr. Netbsd Mitigation only Fix from $1,9502000-02-16 HIGH 7.2 CVE-2000-0157 NetBSD ptrace call on VAX allows local users to gain privileges by modifying the PSL contents in the debugging process. Netbsd Mitigation only Fix from $1,9502000-02-01 MEDIUM 6.4 CVE-1999-0763 NetBSD on a multi-homed host allows ARP packets on one network to modify ARP entries on another connected network. Netbsd Mitigation only Fix from $1,6001999-05-01 MEDIUM 6.4 CVE-1999-0764 NetBSD allows ARP packets to overwrite static ARP entries. Netbsd Mitigation only Fix from $1,6001999-05-01 HIGH 7.2 CVE-1999-0466 The SVR4 /dev/wabi special device file in NetBSD 1.3.3 and earlier allows a local user to read or write arbitrary files on the disk associated with t… Netbsd Mitigation only Fix from $1,9501999-04-21 HIGH 7.2 CVE-1999-0420 umapfs allows local users to gain root privileges by changing their uid through a malicious mount_umap program. Umapfs Mitigation only Fix from $1,9501999-03-17