CVE-2000-0574

FTP servers such as OpenBSD ftpd, NetBSD ftpd, ProFTPd and Opieftpd do not properly cleanse untrusted format strings that are used in the setproctitle function sometimes called by setproctitle, which allows remote attackers to cause a denial of service or execute arbitrary commands...

Проблемы с libdes в NetBSD

Если отсутствует или не функционирует /dev/urandom, используется предсказуемая последовательность при генерации ключей...

Security Advisory 2000-007

-----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 2000-007 ================================= Topic: bad key generation in libdes if no /dev/urandom Version: Domestic US NetBSD-current between 19990624 and 20000622. No formal releases of NetBSD are vulnerable. Severity: high only if...

FreeBSD 3.x4.05.0 NetBSD 1.4.11.4.2 OpenBSD 2.x - Denial of Service

FreeBSD 3.x4.05.0 NetBSD 1.4.11.4.2 OpenBSD 2.x - Denial of Service // source: https://www.securityfocus.com/bid/1296/info A denial of service attack exists that affects FreeBSD, NetBSD and OpenBSD. It is believed that all versions of these operating systems are vulnerable. The vulnerability is...

FreeBSD 3.x/4.0/5.0 / NetBSD 1.4.1/1.4.2 / OpenBSD 2.x - Denial of Service

// source: https://www.securityfocus.com/bid/1296/info A denial of service attack exists that affects FreeBSD, NetBSD and OpenBSD. It is believed that all versions of these operating systems are vulnerable. The vulnerability is related to setting socket options regarding the size of the send and...

Дырка в ftpchroot в NetBSD

Неправильный разбор /etc/ftpchroot приводит к тому, что пользователь может попасть в директории за пределами домашнего каталога...

Security Advisory 2000-006

-----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 2000-006 ================================= Topic: /etc/ftpchroot parsing broken in NetBSD-1.4.2 Version: NetBSD 1.4.2 only Severity: medium to high if using /etc/ftpchroot, none if not. Abstract ======== A fix which attempted to make...

CVE-2000-0462

ftpd in NetBSD 1.4.2 does not properly parse entries in /etc/ftpchroot and does not chroot the specified users, which allows those users to access other files outside of their home directory...

CVE-2000-0456

NetBSD 1.4.2 and earlier allows local users to cause a denial of service by repeatedly running certain system calls in the kernel which do not yield the CPU, aka "cpu-hog"...

[NHC20000504a.0: NetBSD Panics when sent unaligned IP options]

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 IIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIII ,=wwmmm=, .,=""" "M ,gP" "& M & ,d" M, ,R "k ,P "k F W , Vk W '$ ,W M ,F M $ M J$ ,,,====,,, ,mM""""""MM@ W MP',,===="""""""",aP""""Mww M gF '& ,,0" -^ -"""""""F ' 'M& $ ,W $...

NetBSD Security Advisory 2000-002

NetBSD Security Advisory 2000-002 ================================= Topic: IP options processing Denial of Service Version: NetBSD 1.4.2 and prior; NetBSD-current until 20000507. Severity: Network-connected systems can be crashed remotely. Abstract ======== Receipt of IP packets with certain...

FreeBSD 3.44.05.0 NetBSD 1.4 - Unaligned IP Option Denial of Service

FreeBSD 3.44.05.0 NetBSD 1.4 - Unaligned IP Option Denial of Service // source: https://www.securityfocus.com/bid/1173/info A vulnerability exists in the 1.4.x NetBSD kernel that may allow remote attackers to cause the machine to kernel panic on certain architectures. By sending a packet to a...

FreeBSD 3.4/4.0/5.0 / NetBSD 1.4 - Unaligned IP Option Denial of Service

// source: https://www.securityfocus.com/bid/1173/info A vulnerability exists in the 1.4.x NetBSD kernel that may allow remote attackers to cause the machine to kernel panic on certain architectures. By sending a packet to a machine running the Alpha or SPARC versions of NetBSD, with an unaligned...

CVE-2000-0440

NetBSD 1.4.2 and earlier allows remote attackers to cause a denial of service by sending a packet with an unaligned IP timestamp option...

CVE-2000-0157

NetBSD ptrace call on VAX allows local users to gain privileges by modifying the PSL contents in the debugging process...

CVE-1999-0764

NetBSD ARP handling allows ARP packets to overwrite static ARP entries. This can affect ownership of IP-to-MAC mappings, with partial integrity and availability impact as per NVD metrics. The exact affected NetBSD versions, vulnerable code path, exploit details, and official remediation are not p...

CVE-1999-0763

CVE-1999-0763 affects NetBSD on multi-homed hosts: ARP traffic on one network can modify ARP entries on a different connected network, enabling cross-network ARP manipulation. This is described consistently across the NVD entry and Red Hat’s security page. No explicit remediation steps are provid...

CVE-1999-0763

NetBSD on a multi-homed host allows ARP packets on one network to modify ARP entries on another connected network...

CVE-1999-0764

NetBSD allows ARP packets to overwrite static ARP entries...

CVE-1999-0396

CVE-1999-0396 describes a race condition in NetBSD TCP servers between the separate calls to select() and accept(), which can allow remote attackers to cause a denial of service. The available connected documents confirm the vulnerability is in NetBSD TCP server handling, but do not specify affec...