CVE-2000-0157

NetBSD ptrace call on VAX allows local users to gain privileges by modifying the PSL contents in the debugging process...

CVE-1999-0764

NetBSD allows ARP packets to overwrite static ARP entries...

CVE-1999-0764

NetBSD ARP handling allows ARP packets to overwrite static ARP entries. This can affect ownership of IP-to-MAC mappings, with partial integrity and availability impact as per NVD metrics. The exact affected NetBSD versions, vulnerable code path, exploit details, and official remediation are not p...

CVE-1999-0763

CVE-1999-0763 affects NetBSD on multi-homed hosts: ARP traffic on one network can modify ARP entries on a different connected network, enabling cross-network ARP manipulation. This is described consistently across the NVD entry and Red Hat’s security page. No explicit remediation steps are provid...

CVE-1999-0763

NetBSD on a multi-homed host allows ARP packets on one network to modify ARP entries on another connected network...

CVE-1999-0367

NetBSD netstat command allows local users to access kernel memory...

CVE-1999-0422

In some cases, NetBSD 1.3.3 mount allows local users to execute programs in some file systems that have the "noexec" flag set...

CVE-1999-0396

A race condition between the select and accept calls in NetBSD TCP servers allows remote attackers to cause a denial of service...

CVE-1999-0396

CVE-1999-0396 describes a race condition in NetBSD TCP servers between the separate calls to select() and accept(), which can allow remote attackers to cause a denial of service. The available connected documents confirm the vulnerability is in NetBSD TCP server handling, but do not specify affec...

CVE-1999-0446

Local users can perform a denial of service in NetBSD 1.3.3 and earlier versions by creating an unusual symbolic link with the ln command, triggering a bug in VFS...

CVE-1999-0422

The CVE-1999-0422 issue affects NetBSD 1.3.3 where the mount functionality allows local users to execute programs in file systems that have the noexec flag set. Root cause is a problem in mount; impact is local execution of potentially untrusted code within those noexec file systems. Public recor...

CVE-1999-0367

CVE-1999-0367 affects the NetBSD netstat command, where local users can access kernel memory. The connected Red Hat, EUVD, CVE, and NVD entries reiterate: NetBSD netstat is the affected component; root cause details are not provided in the supplied documents. NVD describes low impact with partial...

CVE-1999-0466

The SVR4 /dev/wabi special device file in NetBSD 1.3.3 and earlier allows a local user to read or write arbitrary files on the disk associated with that device...

CVE-1999-0446

CVE-1999-0446 affects NetBSD 1.3.3 and earlier. A local user can trigger a denial of service by creating an unusual symbolic link with the ln command, exploiting a bug in the VFS subsystem. The connected Red Hat and CVE records corroborate the local DoS impact. The available documents do not spec...

CVE-1999-0466

NetBSD 1.3.3 and earlier are affected by CVE-1999-0466 via the SVR4 /dev/wabi special device file, which allows a local user to read or write arbitrary files on the disk associated with that device due to improper access. Connected documents confirm the same description across Red Hat security ad...

bsd_bugs.txt

Subject: serious problem in netbsd/openbsd procfs/fdesc To: [email protected] Greetings. I have found a nasty bug in the fdesc and procfs filesystems included with NetBSD and OpenBSD. Any user with access to a mounted procfs/fdesc filesystem has the ability to cause a kernel panic. The...

freebsd_DoS.txt

Subject: Local DoS in FreeBSD To: [email protected] -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 This was first posted to the FreeBSD security list on the 9th of August, subsequently discussed on freebsd-stable and freebsd-hackers... no one seems to care, even though it is able to lock u...

netBSD_local_DoS.txt

Subject: Re: NetBSD 1.4.1 local DoS To: [email protected] This does not freeze' the system per se. What it does is tie up all the network resources, and make it impossible to any network I/O even through Unx-domain sockets. Linux is not generally vulnerable to the exploit as posted, becau...

CVE-2000-0489

FreeBSD, NetBSD, and OpenBSD allow an attacker to cause a denial of service by creating a large number of socket pairs using the socketpair function, setting a large buffer size via setsockopt, then writing large buffers...

FreeBSD 5.0 NetBSD 1.4.2 OpenBSD 2.7 - setsockopt() Denial of Service

FreeBSD 5.0 NetBSD 1.4.2 OpenBSD 2.7 - setsockopt Denial of Service // source: https://www.securityfocus.com/bid/622/info A denial of service attack exists that affects FreeBSD, NetBSD and OpenBSD, and potentially other operating systems based in some part on BSD. It is believed that all versions...