1920 matches found
CVE-2000-0574: Undefined Security Weakness
FTP servers such as OpenBSD ftpd, NetBSD ftpd, ProFTPd and Opieftpd do not properly cleanse untrusted format strings that are used in the setproctitle function sometimes called by setproctitle, which allows remote attackers to cause a denial of service or execute arbitrary commands...
CVE-2000-0574
FTP servers such as OpenBSD ftpd, NetBSD ftpd, ProFTPd and Opieftpd do not properly cleanse untrusted format strings that are used in the setproctitle function sometimes called by setproctitle, which allows remote attackers to cause a denial of service or execute arbitrary commands...
Удаленный root через ftpd в OpenBSD
Ошибка "форматной строки" полностью аналогичная ошибке в wu-ftpd...
Possible root exploit in ISC DHCP client.
Somebody at OpenBSD discovered a possible root exploit in the ISC DHCP client. This exploit is present in all versions of the ISC DHCP client prior to 2.0pl1 and 3.0b1pl14, which I just released this evening. Anybody who is using versions of the ISC DHCP client other than these is strongly urged ...
FreeBSD 3.x4.05.0 NetBSD 1.4.11.4.2 OpenBSD 2.x - Denial of Service
FreeBSD 3.x4.05.0 NetBSD 1.4.11.4.2 OpenBSD 2.x - Denial of Service // source: https://www.securityfocus.com/bid/1296/info A denial of service attack exists that affects FreeBSD, NetBSD and OpenBSD. It is believed that all versions of these operating systems are vulnerable. The vulnerability is...
FreeBSD 3.x/4.0/5.0 / NetBSD 1.4.1/1.4.2 / OpenBSD 2.x - Denial of Service
// source: https://www.securityfocus.com/bid/1296/info A denial of service attack exists that affects FreeBSD, NetBSD and OpenBSD. It is believed that all versions of these operating systems are vulnerable. The vulnerability is related to setting socket options regarding the size of the send and...
CVE-1999-0727
A kernel leak in the OpenBSD kernel allows IPsec packets to be sent unencrypted...
CVE-1999-0727
CVE-1999-0727 affects the OpenBSD kernel, where a kernel leak could allow IPsec packets to be sent unencrypted. Documents confirm the root cause is a kernel leak in the OpenBSD kernel, with impact described as partial confidentiality (IPsec traffic could be exposed). The available sources do not ...
CVE-1999-0727: Undefined Security Weakness
A kernel leak in the OpenBSD kernel allows IPsec packets to be sent unencrypted...
CVE-1999-0798
CVE-1999-0798 : The vulnerability is a buffer overflow in bootpd on OpenBSD, FreeBSD, and Linux caused by a malformed header type. This year‑old CVE is referenced across multiple feeds (NVD, Red Hat, CVE List) with consistent description. Impact described in sources as a buffer overflow affecting...
CVE-1999-0798
Buffer overflow in bootpd on OpenBSD, FreeBSD, and Linux systems via a malformed header type...
CVE-1999-0798: Undefined Security Weakness
Buffer overflow in bootpd on OpenBSD, FreeBSD, and Linux systems via a malformed header type...
CVE-1999-0703
OpenBSD, BSDI, and other Unix operating systems allow users to set chflags and fchflags on character and block devices...
CVE-1999-0724
Summary: CVE-1999-0724 describes a buffer overflow in OpenBSD’s procfs and fdescfs file systems caused by the uio_offset value used by readdir(). The connected Red Hat and CVE records reiterate this description. The affected components are the OpenBSD procfs and fdescfs implementations; no additi...
CVE-1999-0703
CVSS shows low impact with local access. The CVE notes that OpenBSD, BSDI, and other Unix systems allow users to set chflags and fchflags on character and block devices. Connected records corroborate this behavior; however, the underlying root cause, affected versions, and remediation are not det...
CVE-1999-0724
Buffer overflow in OpenBSD procfs and fdescfs file systems via uiooffset in the readdir function...
CVE-1999-0703: Undefined Security Weakness
OpenBSD, BSDI, and other Unix operating systems allow users to set chflags and fchflags on character and block devices...
CVE-1999-0724: Undefined Security Weakness
Buffer overflow in OpenBSD procfs and fdescfs file systems via uiooffset in the readdir function...
ssh-1.2.27-exploit.txt
Ok, here is the exploit for SSH-1.2.27 compiled with RSAREF2. It was tested against sshd running on Linux Redhat 6.0 and OpenBSD 2.6, from a Linux Redhat 6.0 box. Since its a modified ssh client, i will just send the diffs against an unpatched ssh-1.2.27 distribution. and i'll try to explain what...