Browse CVEs

HIGH 10.0 CVE-2002-0640EPSS 27% Buffer overflow in sshd in OpenSSH 2.3.1 through 3.3 may allow remote attackers to execute arbitrary code via a large number of responses during chal… Openssh Mitigation only Fix from $1,9502002-07-03 MEDIUM 5.5 CVE-2001-1559 The uipc system calls (uipc_syscalls.c) in OpenBSD 2.9 and 3.0 provide user mode return instead of versus rval kernel mode values to the fdrelease fu… OpenBSD No fix yet Fix from $1,6002001-12-31 HIGH 7.5 CVE-2001-1459 OpenSSH 2.9 and earlier does not initiate a Pluggable Authentication Module (PAM) session if commands are executed with no pty, which allows local us… Openssh Mitigation only Fix from $1,9502001-06-19 MEDIUM 5.0 CVE-2000-0310 IP fragment assembly in OpenBSD 2.4 allows a remote attacker to cause a denial of service by sending a large number of fragmented packets. OpenBSD Mitigation only Fix from $1,6002001-03-12 HIGH 10.0 CVE-2000-0525 OpenSSH does not properly drop privileges when the UseLogin option is enabled, which allows local users to execute arbitrary commands by providing th… Openssh Mitigation only Fix from $1,9502000-06-08 MEDIUM 5.1 CVE-2000-0217 The default configuration of SSH allows X forwarding, which could allow a remote attacker to control a client's X sessions via a malicious xauth prog… Openssh Mitigation only Fix from $1,6002000-02-24 MEDIUM 5.0 CVE-1999-0727 A kernel leak in the OpenBSD kernel allows IPsec packets to be sent unencrypted. OpenBSD No fix yet Fix from $1,6001999-08-06 MEDIUM 5.0 CVE-1999-0481 Denial of service in "poll" in OpenBSD. OpenBSD No fix yet Fix from $1,6001999-03-22 MEDIUM 5.0 CVE-1999-0482 OpenBSD kernel crash through TSS handling, as caused by the crashme program. OpenBSD Mitigation only Fix from $1,6001999-03-21 HIGH 7.2 CVE-1999-0062 The chpass command in OpenBSD allows a local user to gain root access through file descriptor leakage. OpenBSD Mitigation only Fix from $1,9501998-08-03