CVE-2002-0830

Network File System NFS in FreeBSD 4.6.1 RELEASE-p7 and earlier, NetBSD 1.5.3 and earlier, and possibly other operating systems, allows remote attackers to cause a denial of service hang via an RPC message with a zero length payload, which causes NFS to reference a previous payload and enter an...

CVE-2002-0414

Affected software: KAME-derived IPsec implementations on NetBSD 1.5.2, FreeBSD 4.5, and other OSes. Vulnerability: the implementation does not properly consult the Security Policy Database (SPD), which can allow a Security Gateway (SG) that does not use Encapsulating Security Payload (ESP) to for...

CVE-2001-1145

fts routines in FreeBSD 4.3 and earlier, NetBSD before 1.5.2, and OpenBSD 2.9 and earlier can be forced to change chdir into a different directory than intended when the directory above the current directory is moved, which could cause scripts to perform dangerous actions on the wrong directories...

CVE-2002-1500

Buffer overflow in 1 mrinfo, 2 mtrace, and 3 pppd in NetBSD 1.4.x through 1.6 allows local users to gain privileges by executing the programs after filling the file descriptor tables, which produces file descriptors larger than FDSETSIZE, which are not checked by FDSET...

CVE-2002-1543

Buffer overflow in trek on NetBSD 1.5 through 1.5.3 allows local users to gain privileges via long keyboard input...

CVE-2002-1500

Buffer overflow in 1 mrinfo, 2 mtrace, and 3 pppd in NetBSD 1.4.x through 1.6 allows local users to gain privileges by executing the programs after filling the file descriptor tables, which produces file descriptors larger than FDSETSIZE, which are not checked by FDSET...

CVE-2002-1500

CVE-2002-1500 describes a buffer overflow in NetBSD 1.4.x–1.6 affecting the programs mrinfo , mtrace , and pppd . The vulnerability arises when handling file descriptor tables that may exceed FD_SETSIZE, leaving these programs to fail or be exploited by local users to gain privileges. The describ...

CVE-2002-2245

ftpd in NetBSD 1.5 through 1.5.3 and 1.6 does not properly quote a digit in response to a STAT command for a filename that contains a carriage return followed by a digit, which can cause firewalls and other intermediary devices to lose proper track of the FTP session...

CVE-2002-2092

Race condition in exec in OpenBSD 4.0 and earlier, NetBSD 1.5.2 and earlier, and FreeBSD 4.4 and earlier allows local users to gain privileges by attaching a debugger to a process before the kernel has determined that the process is setuid or setgid...

NetBSD IPFilter FTP proxy protection bypass

It's possible to set TCP portmapping to client or server port behind firewall...

NetBSD Security Advisory 2002-024: IPFilter FTP proxy

-----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 2002-024 ================================= Topic: IPFilter FTP proxy Version: NetBSD-current: source prior to September 20, 2002 NetBSD 1.6: affected NetBSD-1.5.3: affected NetBSD-1.5.2: affected NetBSD-1.5.1: affected NetBSD-1.5: affect...

CVE-2002-1192

Multiple buffer overflows in rogue on NetBSD 1.6 and earlier, FreeBSD 4.6, and possibly other operating systems, allows local users to gain "games" group privileges via malformed entries in a game save file...

CVE-2002-1194

Buffer overflow in talkd on NetBSD 1.6 and earlier, and possibly other operating systems, may allow remote attackers to execute arbitrary code via a long inbound message...

NetBSD IPSec DoS

Short packet causes system to halt...

NetBSD Security Advisory 2002-026: Buffer overflow in kadmind daemon

-----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 2002-026 ================================= Topic: Buffer overflow in kadmind daemon Version: NetBSD-current: source prior to October 21 2002 NetBSD-1.6: affected NetBSD-1.5.3: affected NetBSD-1.5.2: affected NetBSD-1.5.1: affected...

NetBSD Security Advisory 2002-016: Insufficient length check in ESP authentication data

-----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 2002-016 ================================= Topic: Insufficient length check in ESP authentication data Version: NetBSD-current: source prior to August 23, 2002 NetBSD-1.6 beta: source prior to August 23, 2002 NetBSD-1.5.3: affected...

CVE-2002-1192

Multiple buffer overflows in rogue on NetBSD 1.6 and earlier, FreeBSD 4.6, and possibly other operating systems, allows local users to gain "games" group privileges via malformed entries in a game save file...

CVE-2002-1194

Buffer overflow in talkd on NetBSD 1.6 and earlier, and possibly other operating systems, may allow remote attackers to execute arbitrary code via a long inbound message...

EUVD-2002-1178

Buffer overflow in talkd on NetBSD 1.6 and earlier, and possibly other operating systems, may allow remote attackers to execute arbitrary code via a long inbound message...

CVE-2002-1194

CVE-2002-1194 describes a buffer overflow in talkd on NetBSD 1.6 and earlier (and possibly other OSes), which could allow remote attackers to execute arbitrary code via a long inbound message. The available connected documents confirm the vulnerability exists in the talk daemon and the potential ...