CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register   Reset Password   Activate Account
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Bsdi » Bsd Os : Security Vulnerabilities

CVSS Scores Greater Than: 0   1   2   3   4   5   6   7   8   9  
Copy Results Download Results Select Table
Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
1 CVE-2008-4609 16 DoS 2008-10-20 2012-07-21
7.1
 None Remote Medium Not required None None Complete
The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other operating systems allows remote attackers to cause a denial of service (connection queue exhaustion) via multiple vectors that manipulate information in the TCP state table, as demonstrated by sockstress.
2 CVE-2001-1541 Exec Code Overflow 2001-12-31 2008-09-05
7.2
 Admin Local Low Not required Complete Complete Complete
Buffer overflow in Unix-to-Unix Copy Protocol (UUCP) in BSDI BSD/OS 3.0 through 4.2 allows local users to execute arbitrary code via a long command line argument.
3 CVE-2001-1154 DoS 2001-08-30 2008-09-05
5.0
 None Remote Low Not required None None Partial
Cyrus 2.0.15, 2.0.16, and 1.6.24 on BSDi 4.2, with IMAP enabled, allows remote attackers to cause a denial of service (hang) using PHP IMAP clients.
4 CVE-2001-1133 DoS 2001-08-21 2008-09-05
2.1
 None Local Low Not required None None Partial
Vulnerability in a system call in BSDI 3.0 and 3.1 allows local users to cause a denial of service (reboot) in the kernel via a particular sequence of instructions.
5 CVE-2000-1103 +Priv 2001-01-09 2008-09-05
7.2
 Admin Local Low Not required Complete Complete Complete
rcvtty in BSD 3.0 and 4.0 does not properly drop privileges before executing a script, which allows local attackers to gain privileges by specifying an alternate Trojan horse script on the command line.
6 CVE-1999-0880 DoS 1999-10-01 2008-09-09
5.0
 None Remote Low Not required None None Partial
Denial of service in WU-FTPD via the SITE NEWER command, which does not free memory properly.
7 CVE-1999-0879 Overflow +Priv 1999-10-01 2008-09-09
10.0
 Admin Remote Low Not required Complete Complete Complete
Buffer overflow in WU-FTPD and related FTP servers allows remote attackers to gain root privileges via macro variables in a message file.
8 CVE-1999-0798 Overflow 1998-12-04 2008-09-09
10.0
 Admin Remote Low Not required Complete Complete Complete
Buffer overflow in bootpd on OpenBSD, FreeBSD, and Linux systems via a malformed header type.
9 CVE-1999-0747 DoS 1999-08-18 2008-09-09
2.1
 None Local Low Not required None None Partial
Denial of service in BSDi Symmetric Multiprocessing (SMP) when an fstat call is made when the system has a high CPU load.
10 CVE-1999-0704 Overflow 1999-09-16 2008-09-09
9.3
 Admin Remote Medium Not required Complete Complete Complete
Buffer overflow in Berkeley automounter daemon (amd) logging facility provided in the Linux am-utils package and others.
11 CVE-1999-0703 1999-08-03 2008-09-09
3.6
 None Local Low Not required None Partial Partial
OpenBSD, BSDI, and other Unix operating systems allow users to set chflags and fchflags on character and block devices.
12 CVE-1999-0335 1996-08-01 2008-09-09
7.2
 Admin Local Low Not required Complete Complete Complete
DEPRECATED. This entry has been deprecated. It is a duplicate of CVE-1999-0032.
13 CVE-1999-0323 1998-02-20 2008-09-09
10.0
 Admin Remote Low Not required Complete Complete Complete
FreeBSD mmap function allows users to modify append-only or immutable files.
14 CVE-1999-0305 1998-02-01 2008-09-09
5.0
 None Remote Low Not required Partial None None
The system configuration control (sysctl) facility in BSD based operating systems OpenBSD 2.2 and earlier, and FreeBSD 2.2.5 and earlier, does not properly restrict source routed packets even when the (1) dosourceroute or (2) forwarding variables are set, which allows remote attackers to spoof TCP connections.
15 CVE-1999-0304 1998-02-01 2008-09-09
7.2
 Admin Local Low Not required Complete Complete Complete
mmap function in BSD allows local attackers in the kmem group to modify memory through devices.
16 CVE-1999-0297 Overflow 1996-12-12 2008-09-09
7.2
 Admin Local Low Not required Complete Complete Complete
Buffer overflow in Vixie Cron library up to version 3.0 allows local users to obtain root access via a long environmental variable.
17 CVE-1999-0165 1997-03-01 2008-09-09
10.0
 None Remote Low Not required Complete Complete Complete
NFS cache poisoning.
18 CVE-1999-0131 DoS Overflow 1996-09-11 2008-09-09
7.2
 Admin Local Low Not required Complete Complete Complete
Buffer overflow and denial of service in Sendmail 8.7.5 and earlier through GECOS field gives root access to local users.
19 CVE-1999-0130 +Priv 1996-11-16 2008-09-09
7.2
 Admin Local Low Not required Complete Complete Complete
Local users can start Sendmail in daemon mode and gain root privileges.
20 CVE-1999-0129 1996-12-03 2008-09-09
4.6
 User Local Low Not required Partial Partial Partial
Sendmail allows local users to write to a file and gain group permissions via a .forward or :include: file.
21 CVE-1999-0099 Overflow +Priv 1995-10-19 2008-09-09
10.0
 Admin Remote Low Not required Complete Complete Complete
Buffer overflow in syslog utility allows local or remote attackers to gain root privileges.
22 CVE-1999-0096 1996-12-10 2008-09-09
5.0
 None Remote Low Not required None Partial None
Sendmail decode alias can be used to overwrite sensitive files.
23 CVE-1999-0078 Exec Code 1996-04-18 2008-09-09
1.9
 None Local Medium Not required Partial None None
pcnfsd (aka rpc.pcnfsd) allows local users to change file permissions, or execute arbitrary commands through arguments in the RPC call.
24 CVE-1999-0061 1997-10-02 2008-09-09
5.1
 User Remote High Not required Partial Partial Partial
File creation and deletion, and remote execution, in the BSD line printer daemon (lpd).
25 CVE-1999-0052 DoS 1998-11-04 2008-09-09
5.0
 None Remote Low Not required None None Partial
IP fragmentation denial of service in FreeBSD allows a remote attacker to cause a crash.
26 CVE-1999-0047 Overflow 1997-01-28 2008-09-09
10.0
 Admin Remote Low Not required Complete Complete Complete
MIME conversion buffer overflow in sendmail versions 8.8.3 and 8.8.4.
27 CVE-1999-0046 Overflow 1997-02-06 2008-09-09
10.0
 Admin Remote Low Not required Complete Complete Complete
Buffer overflow of rlogin program using TERM environmental variable.
28 CVE-1999-0043 Exec Code 1996-12-04 2008-09-09
10.0
 Admin Remote Low Not required Complete Complete Complete
Command execution via shell metachars in INN daemon (innd) 1.5 using "newgroup" and "rmgroup" control messages, and others.
29 CVE-1999-0042 Overflow 1997-04-07 2008-09-09
10.0
 Admin Remote Low Not required Complete Complete Complete
Buffer overflow in University of Washington's implementation of IMAP and POP servers.
30 CVE-1999-0040 Exec Code Overflow 1997-05-01 2008-09-09
7.2
 Admin Local Low Not required Complete Complete Complete
Buffer overflow in Xt library of X Windowing System allows local users to execute commands with root privileges.
31 CVE-1999-0038 Exec Code Overflow 1997-04-26 2008-09-09
7.2
 Admin Local Low Not required Complete Complete Complete
Buffer overflow in xlock program allows local users to execute commands as root.
32 CVE-1999-0034 Overflow 1997-05-29 2008-09-09
7.2
 Admin Local Low Not required Complete Complete Complete
Buffer overflow in suidperl (sperl), Perl 4.x and 5.x.
33 CVE-1999-0032 Exec Code Overflow 1996-10-25 2008-09-09
7.2
 Admin Local Low Not required Complete Complete Complete
Buffer overflow in lpr, as used in BSD-based systems including Linux, allows local users to execute arbitrary code as root via a long -C (classification) command line option.
34 CVE-1999-0024 1997-08-13 2008-09-09
5.0
 None Remote Low Not required None Partial None
DNS cache poisoning via BIND, by predictable query IDs.
35 CVE-1999-0023 Overflow +Priv 1996-07-24 2008-09-09
7.2
 Admin Local Low Not required Complete Complete Complete
Local user gains root privileges via buffer overflow in rdist, via lookup() function.
36 CVE-1999-0022 Overflow +Priv 1996-07-03 2008-09-09
7.2
 Admin Local Low Not required Complete Complete Complete
Local user gains root privileges via buffer overflow in rdist, via expstr() function.
37 CVE-1999-0009 Overflow 1998-04-08 2008-09-09
10.0
 Admin Remote Low Not required Complete Complete Complete
Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases.
38 CVE-1999-0002 119 Overflow 1998-10-12 2009-01-26
10.0
 Admin Remote Low Not required Complete Complete Complete
Buffer overflow in NFS mountd gives root access to remote attackers, mostly in Linux systems.
39 CVE-1999-0001 20 DoS 1999-12-30 2010-12-16
5.0
 None Remote Low Not required None None Partial
ip_input.c in BSD-derived TCP/IP implementations allows remote attackers to cause a denial of service (crash or hang) via crafted packets.
Total number of vulnerabilities : 39   Page : 1 (This Page)
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.