NetBSD

CVEs (176)

• CVE-2003-0694Oct 6, 2003
  Sendmail, Inc.

  Sendmail
  risk 0.08cvss —epss 0.60

  The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c.

• CVE-1999-0046Feb 6, 1997
  Bsdi

  BSD OS
  risk 0.07cvss —epss 0.53

  Buffer overflow of rlogin program using TERM environmental variable.

• CVE-2012-0217Jun 12, 2012
  Microsoft

  Windows Server 2008
  risk 0.06cvss —epss 0.37

  The x86-64 kernel system-call functionality in Xen 4.1.2 and earlier, as used in Citrix XenServer 6.0.2 and earlier and other products; Oracle Solaris 11 and earlier; illumos before r13724; Joyent SmartOS before 20120614T184600Z; FreeBSD before 9.0-RELEASE-p3; NetBSD 6.0 Beta…

• CVE-2001-0554Aug 14, 2001
  Telnetd

  Telnetd
  risk 0.06cvss —epss 0.38

  Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a set of options including AYT (Are You There), which is not properly handled by the telrcv function.

• CVE-1999-0015Dec 16, 1997
  Sun Corporation

  Sunos
  risk 0.06cvss —epss 0.36

  Teardrop IP denial of service.

• CVE-2011-0419May 16, 2011
  Apache

  HTTP Server
  risk 0.05cvss —epss 0.30

  Stack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library before 1.4.3 and the Apache HTTP Server before 2.2.18, and in fnmatch.c in libc in NetBSD 5.1, OpenBSD 4.8, FreeBSD, Apple Mac OS X 10.6, Oracle Solaris…

• CVE-2009-0689Jul 1, 2009
  Seamonkey

  Seamonkey
  risk 0.05cvss —epss 0.28

  Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation in gdtoa/misc.c in libc, as used in multiple operating systems and products including in FreeBSD 6.4 and 7.2, NetBSD 5.0, OpenBSD 4.5, Mozilla Firefox 3.0.x…

• CVE-2008-1391Mar 27, 2008
  Apple Inc.

  Mac OS 9
  risk 0.05cvss —epss 0.19

  Multiple integer overflows in libc in NetBSD 4.x, FreeBSD 6.x and 7.x, and probably other BSD and Apple Mac OS platforms allow context-dependent attackers to execute arbitrary code via large values of certain integer fields in the format argument to (1) the strfmon function in…

• CVE-2006-6652Dec 20, 2006
  Apple Inc.

  Mac OS X
  risk 0.05cvss —epss 0.19

  Buffer overflow in the glob implementation (glob.c) in libc in NetBSD-current before 20050914, NetBSD 2.* and 3.* before 20061203, and Apple Mac OS X before 2007-004, as used by the FTP daemon and tnftpd, allows remote authenticated users to execute arbitrary code via a long…

• CVE-2003-0681Oct 6, 2003
  Sendmail, Inc.

  Sendmail
  risk 0.05cvss —epss 0.20

  A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets (1) recipient (2), final, or (3) mailer-specific envelope recipients, has unknown consequences.

• CVE-2001-0247Jun 18, 2001
  Sgi

  Irix
  risk 0.05cvss —epss 0.19

  Buffer overflows in BSD-based FTP servers allows remote attackers to execute arbitrary commands via a long pattern string containing a {} sequence, as seen in (1) g_opendir, (2) g_lstat, (3) g_stat, and (4) the glob0 buffer as used in the glob functions glob2 and glob3.

• CVE-2011-0418May 24, 2011
  Pureftpd

  Pureftpd
  risk 0.04cvss —epss 0.07

  The glob implementation in Pure-FTPd before 1.0.32, and in libc in NetBSD 5.1, does not properly expand expressions containing curly brackets, which allows remote authenticated users to cause a denial of service (memory consumption) via a crafted FTP STAT command.

• CVE-2009-0687Aug 11, 2009
  Midnightbsd

  Midnightbsd
  risk 0.04cvss —epss 0.10

  The pf_test_rule function in OpenBSD Packet Filter (PF), as used in OpenBSD 4.2 through 4.5, NetBSD 5.0 before RC3, MirOS 10 and earlier, and MidnightBSD 0.3-current allows remote attackers to cause a denial of service (panic) via crafted IP packets that trigger a NULL pointer…

• CVE-2001-0053Feb 12, 2001
  David Madore

  Ftpd BSD
  risk 0.04cvss —epss 0.18

  One-byte buffer overflow in replydirname function in BSD-based ftpd allows remote attackers to gain root privileges.

• CVE-1999-0009Apr 8, 1998
  Isc

  Bind
  risk 0.04cvss —epss 0.29

  Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases.

• CVE-2011-1547May 9, 2011
  NetBSD

  NetBSD
  risk 0.03cvss —epss 0.05

  Multiple stack consumption vulnerabilities in the kernel in NetBSD 4.0, 5.0 before 5.0.3, and 5.1 before 5.1.1, when IPsec is enabled, allow remote attackers to cause a denial of service (memory corruption and panic) or possibly have unspecified other impact via a crafted (1)…

• CVE-2009-2793Sep 18, 2009
  NetBSD

  NetBSD
  risk 0.03cvss —epss 0.01

  The kernel in NetBSD, probably 5.0.1 and earlier, on x86 platforms does not properly handle a pre-commit failure of the iret instruction, which might allow local users to gain privileges via vectors related to a tempEIP pseudocode variable that is outside of the code-segment…

• CVE-2008-4609Oct 20, 2008
  Microsoft

  Windows
  risk 0.03cvss —epss 0.32

  The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other operating systems allows remote attackers to cause a denial of service (connection queue exhaustion) via multiple vectors that manipulate…

• CVE-2008-4247Sep 25, 2008
  FreeBSD

  FreeBSD
  risk 0.03cvss —epss 0.04

  ftpd in OpenBSD 4.3, FreeBSD 7.0, NetBSD 4.0, Solaris, and possibly other operating systems interprets long commands from an FTP client as multiple commands, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and execute arbitrary FTP commands via…

• CVE-2008-1215Mar 9, 2008
  FreeBSD

  FreeBSD
  risk 0.03cvss —epss 0.01

  Stack-based buffer overflow in the command_Expand_Interpret function in command.c in ppp (aka user-ppp), as distributed in FreeBSD 6.3 and 7.0, OpenBSD 4.1 and 4.2, and the net/userppp package for NetBSD, allows local users to gain privileges via long commands containing "~"…