CVE-2001-0284

The CVE-2001-0284 entry describes a buffer overflow in the IPSEC authentication mechanism for OpenBSD 2.8 and earlier. The underlying issue is in the IPSEC AH (IPv4 option) processing, allowing remote attackers to cause a denial of service and potentially execute arbitrary commands via a malforme...

CVE-2000-0309

The i386 trace-trap handling in OpenBSD 2.4 with DDB enabled allows a local user to cause a denial of service...

CVE-2000-0309

Public technical details about CVE-2000-0309 are not provided in the connected documents. The initial entry notes a local DoS in OpenBSD 2.4 with DDB, but no further technical specifics or fixes are included here. Monitor for updates.

CVE-2001-0268

CVE-2001-0268 affects NetBSD 1.5 and earlier and OpenBSD 2.8 and earlier. When the USER_LDT kernel option is enabled, the i386_set_ldt system call does not validate a call gate target, allowing local users to gain root privileges by creating a segment call gate in the Local Descriptor Table whose...

CVE-2000-0310

OpenBSD 2.4 is affected by CVE-2000-0310 through the IP fragment assembly mechanism. The vulnerability can allow a remote attacker to cause a denial of service by sending a large number of fragmented packets, affecting availability. The provided documents describe the issue but do not offer a rem...

CVE-2001-0268

The i386setldt system call in NetBSD 1.5 and earlier, and OpenBSD 2.8 and earlier, when the USERLDT kernel option is enabled, does not validate a call gate target, which allows local users to gain root privileges by creating a segment call gate in the Local Descriptor Table LDT with a target that...

CVE-2001-0284

Buffer overflow in IPSEC authentication mechanism for OpenBSD 2.8 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a malformed Authentication header AH IPv4 option...

OpenBSD 2.x < 2.8 FTPd - 'glob()' Remote Buffer Overflow

// source: https://www.securityfocus.com/bid/2548/info The BSD ftp daemon and derivatives such as IRIX ftpd or the ftp daemon shipped with Kerberos 5 contain a number of buffer overflows that may lead to a compromise of root access to malicious users. During parsing operations, the ftp daemon...

OpenBSD 2.x 2.8 FTPd - glob() Remote Buffer Overflow

OpenBSD 2.x 2.8 FTPd - glob Remote Buffer Overflow // source: https://www.securityfocus.com/bid/2548/info The BSD ftp daemon and derivatives such as IRIX ftpd or the ftp daemon shipped with Kerberos 5 contain a number of buffer overflows that may lead to a compromise of root access to malicious...

CVE-2000-0312

cron in OpenBSD 2.5 allows local users to gain root privileges via an argv that is not NULL terminated, which is passed to cron's fake popen function...

CVE-2000-0313

Vulnerability in OpenBSD 2.6 allows a local user to change interface media configurations...

CVE-2000-0309

The i386 trace-trap handling in OpenBSD 2.4 with DDB enabled allows a local user to cause a denial of service...

CVE-2000-0310

IP fragment assembly in OpenBSD 2.4 allows a remote attacker to cause a denial of service by sending a large number of fragmented packets...

CVE-2000-0312

cron in OpenBSD 2.5 allows local users to gain root privileges via an argv that is not NULL terminated, which is passed to cron's fake popen function...

CVE-2000-0312

OpenBSD 2.5 cron is affected. A local user can exploit an argv[] that is not NULL terminated, which is passed to cron’s fake popen function, to gain root privileges.

Authentication By-Pass Vulnerability in OpenSSH-2.3.1 &#40;devel snapshot&#41;

Please, check http://www.openssh.com/security.html for a full summary of security related issues in OpenSSH. ---------------------------------------------------------------------------- OpenBSD Security Advisory February 8, 2001 Authentication By-Pass Vulnerability in OpenSSH-2.3.1...

CVE-2000-0914

OpenBSD 2.6 and earlier allows remote attackers to cause a denial of service by flooding the server with ARP requests...

CVE-2000-0996

Format string vulnerability in OpenBSD su program and possibly other BSD-based operating systems allows local attackers to gain root privileges via a malformed shell...

CVE-2000-1010

Format string vulnerability in talkd in OpenBSD and possibly other BSD-based OSes allows remote attackers to execute arbitrary commands via a user name that contains format characters...

CVE-2000-0995

Format string vulnerability in OpenBSD yppasswd program and possibly other BSD-based operating systems allows attackers to gain root privileges a malformed name...