7.0 * * * : Security Vulnerabilities

Cpe Name:cpe:2.3:o:freebsd:freebsd:7.0:*:*:*:*:*:*:*

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : CVE Number Descending CVE Number Ascending CVSS Score Descending Number Of Exploits Descending

#	CVE ID	CWE ID	# of Exploits	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2018-6923	400		DoS	2018-09-04	2018-11-13	7.8	None	Remote	Low	Not required	None	None	Complete
In FreeBSD before 11.1-STABLE, 11.2-RELEASE-p2, 11.1-RELEASE-p13, ip fragment reassembly code is vulnerable to a denial of service due to excessive system resource consumption. This issue can allow a remote attacker who is able to send an arbitrary ip fragments to cause the machine to consume excessive resources.
2	CVE-2013-6834	20		+Info	2013-11-21	2014-03-04	4.9	None	Local	Low	Not required	Complete	None	None
The ql_eioctl function in sys/dev/qlxgbe/ql_ioctl.c in the kernel in FreeBSD 10 and earlier does not validate a certain size parameter, which allows local users to obtain sensitive information from kernel memory via a crafted ioctl call.
3	CVE-2013-6833	20		+Info	2013-11-21	2013-11-25	4.9	None	Local	Low	Not required	Complete	None	None
The qls_eioctl function in sys/dev/qlxge/qls_ioctl.c in the kernel in FreeBSD 10 and earlier does not validate a certain size parameter, which allows local users to obtain sensitive information from kernel memory via a crafted ioctl call.
4	CVE-2013-6832	200		+Info	2013-11-21	2013-11-25	4.9	None	Local	Low	Not required	Complete	None	None
The nand_ioctl function in sys/dev/nand/nand_geom.c in the nand driver in the kernel in FreeBSD 10 and earlier does not properly initialize a certain data structure, which allows local users to obtain sensitive information from kernel memory via a crafted ioctl call.
5	CVE-2012-2143	310			2012-07-05	2016-12-08	4.3	None	Remote	Medium	Not required	None	Partial	None
The crypt_des (aka DES-based crypt) function in FreeBSD before 9.0-RELEASE-p2, as used in PHP, PostgreSQL, and other products, does not process the complete cleartext password if this password contains a 0x80 character, which makes it easier for context-dependent attackers to obtain access via an authentication attempt with an initial substring of the intended password, as demonstrated by a Unicode password.
6	CVE-2010-4210	264		DoS Exec Code	2010-11-22	2017-10-05	7.2	None	Local	Low	Not required	Complete	Complete	Complete
The pfs_getextattr function in FreeBSD 7.x before 7.3-RELEASE and 8.x before 8.0-RC1 unlocks a mutex that was not previously locked, which allows local users to cause a denial of service (kernel panic), overwrite arbitrary memory locations, and possibly execute arbitrary code via vectors related to opening a file on a file system that uses pseudofs.
7	CVE-2010-1938	189	1	DoS Exec Code	2010-05-28	2011-07-29	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Off-by-one error in the __opiereadrec function in readrec.c in libopie in OPIE 2.4.1-test1 and earlier, as used on FreeBSD 6.4 through 8.1-PRERELEASE and other platforms, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long username, as demonstrated by a long USER command to the FreeBSD 8.0 ftpd.
8	CVE-2009-1436	20		+Info	2009-04-27	2016-11-28	4.9	None	Local	Low	Not required	Complete	None	None
The db interface in libc in FreeBSD 6.3, 6.4, 7.0, 7.1, and 7.2-PRERELEASE does not properly initialize memory for Berkeley DB 1.85 database structures, which allows local users to obtain sensitive information by reading a database file.
9	CVE-2009-1041	119		Overflow	2009-03-26	2017-09-29	7.2	None	Local	Low	Not required	Complete	Complete	Complete
The ktimer feature (sys/kern/kern_time.c) in FreeBSD 7.0, 7.1, and 7.2 allows local users to overwrite arbitrary kernel memory via an out-of-bounds timer value.
10	CVE-2009-0641	264		Exec Code Bypass	2009-02-20	2017-09-29	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
sys_term.c in telnetd in FreeBSD 7.0-RELEASE and other 7.x versions deletes dangerous environment variables with a method that was valid only in older FreeBSD distributions, which might allow remote attackers to execute arbitrary code by passing a crafted environment variable from a telnet client, as demonstrated by an LD_PRELOAD value that references a malicious library.
11	CVE-2008-5162	310			2008-11-26	2008-12-03	6.9	None	Local	Medium	Not required	Complete	Complete	Complete
The arc4random function in the kernel in FreeBSD 6.3 through 7.1 does not have a proper entropy source for a short time period immediately after boot, which makes it easier for attackers to predict the function's return values and conduct certain attacks against the GEOM framework and various network protocols, related to the Yarrow random number generator.
12	CVE-2008-4609	16		DoS	2008-10-20	2021-07-07	7.1	None	Remote	Medium	Not required	None	None	Complete
The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other operating systems allows remote attackers to cause a denial of service (connection queue exhaustion) via multiple vectors that manipulate information in the TCP state table, as demonstrated by sockstress.
13	CVE-2008-4247	352		Exec Code CSRF	2008-09-25	2012-10-23	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
ftpd in OpenBSD 4.3, FreeBSD 7.0, NetBSD 4.0, Solaris, and possibly other operating systems interprets long commands from an FTP client as multiple commands, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and execute arbitrary FTP commands via a long ftp:// URI that leverages an existing session from the FTP client implementation in a web browser.
14	CVE-2008-3531	119		Overflow +Priv	2008-09-05	2017-08-08	6.9	None	Local	Medium	Not required	Complete	Complete	Complete
Stack-based buffer overflow in sys/kern/vfs_mount.c in the kernel in FreeBSD 7.0 and 7.1, when vfs.usermount is enabled, allows local users to gain privileges via a crafted (1) mount or (2) nmount system call, related to copying of "user defined data" in "certain error conditions."
15	CVE-2008-3530	20		DoS	2008-09-05	2017-08-08	7.1	None	Remote	Medium	Not required	None	None	Complete
sys/netinet6/icmp6.c in the kernel in FreeBSD 6.3 through 7.1, NetBSD 3.0 through 4.0, and possibly other operating systems does not properly check the proposed new MTU in an ICMPv6 Packet Too Big Message, which allows remote attackers to cause a denial of service (panic) via a crafted Packet Too Big Message.
16	CVE-2008-1391	189		Exec Code Overflow	2008-03-27	2018-10-11	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Multiple integer overflows in libc in NetBSD 4.x, FreeBSD 6.x and 7.x, and probably other BSD and Apple Mac OS platforms allow context-dependent attackers to execute arbitrary code via large values of certain integer fields in the format argument to (1) the strfmon function in lib/libc/stdlib/strfmon.c, related to the GET_NUMBER macro; and (2) the printf function, related to left_prec and right_prec.
17	CVE-2008-1215	264		Overflow +Priv	2008-03-09	2017-08-08	4.6	None	Local	Low	Not required	Partial	Partial	Partial
Stack-based buffer overflow in the command_Expand_Interpret function in command.c in ppp (aka user-ppp), as distributed in FreeBSD 6.3 and 7.0, OpenBSD 4.1 and 4.2, and the net/userppp package for NetBSD, allows local users to gain privileges via long commands containing "~" characters.
18	CVE-2008-0777	264			2008-02-15	2008-09-05	4.9	None	Local	Low	Not required	Complete	None	None
The sendfile system call in FreeBSD 5.5 through 7.0 does not check the access flags of the file descriptor used for sending a file, which allows local users to read the contents of write-only files.
19	CVE-2008-0217	264			2008-01-16	2017-08-08	6.9	None	Local	Medium	Not required	Complete	Complete	Complete
The script program in FreeBSD 5.0 through 7.0-PRERELEASE invokes openpty, which creates a pseudo-terminal with world-readable and world-writable permissions when it is not run as root, which allows local users to read data from the terminal of the user running script.
20	CVE-2008-0216	264			2008-01-16	2017-08-08	2.1	None	Local	Low	Not required	None	Partial	None
The ptsname function in FreeBSD 6.0 through 7.0-PRERELEASE does not properly verify that a certain portion of a device name is associated with a pty of a user who is calling the pt_chown function, which might allow local users to read data from the pty from another user.

Total number of vulnerabilities : 20 Page : 1 (This Page)