CVE-2010-4816: NULL Pointer Dereference

It was found in FreeBSD 8.0, 6.3 and 4.9, and OpenBSD 4.6 that a null pointer dereference in ftpd/popen.c may lead to remote denial of service of the ftpd service...

Exploit for Improper Handling of Exceptional Conditions in Openbsd Opensmtpd

CVE 2020-7247 PoC exploit for Op...

OpenSSH < 5.1 Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

OpenBSD OpenSSH is prone to hijack the X11 forwarding port vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is fr...

OpenSSH 3.2.2 Security Vulnerability

A possible security issue for sshd in OpenBSD has been reported. A vulnerability related to the implementation of BSD authentication exists in sshd that may have security implications. In access configurations which use YP with netgroups, sshd will authenticate users via ACL by checking for the...

OpenSMTPD: Multiple vulnerabilities

Background OpenSMTPD is a lightweight but featured SMTP daemon from OpenBSD. Description Multiple vulnerabilities have been discovered in OpenSMTPD. Please review the CVE identifiers referenced below for details. Impact A remote attacker, by connecting to the SMTP listener daemon, could possibly...

The vulnerability of implementations of WEP, WPA, WPA2, and WPA3 algorithms in the operating system OpenBSD allows a hacker to inject arbitrary network packets.

The vulnerability of implementations of WEP, WPA, WPA2, and WPA3 algorithms in the OpenBSD operating system exists due to the lack of measures to neutralize these special elements. Exploiting this vulnerability allows a malicious actor to inject arbitrary network packets remotely...

OpenBSD Input Validation Error Vulnerability

OpenBSD is a cross-platform, BSD-based UNIX-like operating system from the Canadian OpenBSD Openbsd project team. A security vulnerability exists in OpenBSD version 6.6. An attacker can inject arbitrary network packets independent of the network configuration...

CVE-2020-26142

An issue was discovered in the kernel in OpenBSD 6.6. The WEP, WPA, WPA2, and WPA3 implementations treat fragmented frames as full frames. An adversary can abuse this to inject arbitrary network packets, independent of the network configuration...

CVE-2020-26142

An issue was discovered in the kernel in OpenBSD 6.6. The WEP, WPA, WPA2, and WPA3 implementations treat fragmented frames as full frames. An adversary can abuse this to inject arbitrary network packets, independent of the network configuration...

Design/Logic Flaw

An issue was discovered in the kernel in OpenBSD 6.6. The WEP, WPA, WPA2, and WPA3 implementations treat fragmented frames as full frames. An adversary can abuse this to inject arbitrary network packets, independent of the network configuration...

CVE-2020-26142

An issue was discovered in the kernel in OpenBSD 6.6. The WEP, WPA, WPA2, and WPA3 implementations treat fragmented frames as full frames. An adversary can abuse this to inject arbitrary network packets, independent of the network configuration...

CVE-2020-26142

CVE-2020-26142 is an OpenBSD kernel issue (OpenBSD 6.6) where the WEP, WPA, WPA2, and WPA3 implementations incorrectly treat fragmented frames as full frames. This misbehavior can allow an adversary to inject arbitrary network packets, independent of network configuration, by abusing fragmented f...

CVE-2020-26142

An issue was discovered in the kernel in OpenBSD 6.6. The WEP, WPA, WPA2, and WPA3 implementations treat fragmented frames as full frames. An adversary can abuse this to inject arbitrary network packets, independent of the network configuration...

CVE-2020-26142

Removed by vendor...

CVE-2020-26142

An issue was discovered in the kernel in OpenBSD 6.6. The WEP, WPA, WPA2, and WPA3 implementations treat fragmented frames as full frames. An adversary can abuse this to inject arbitrary network packets, independent of the network configuration...

CVE-2020-26142: Improper Neutralization of Special Elements in Output Used by a Downstream Component

An issue was discovered in the kernel in OpenBSD 6.6. The WEP, WPA, WPA2, and WPA3 implementations treat fragmented frames as full frames. An adversary can abuse this to inject arbitrary network packets, independent of the network configuration...

PT-2021-3060

Name of the Vulnerable Software and Affected Versions OpenBSD version 6.6 Description An issue was discovered in the kernel where the WEP, WPA, WPA2, and WPA3 implementations treat fragmented frames as full frames. This allows an adversary to inject arbitrary network packets, independent of the...

OpenBSD 注入漏洞

OpenBSD is a cross-platform, BSD-based UNIX-like operating system from the Canadian OpenBSD Openbsd project team. A security vulnerability exists in OpenBSD version 6.6. An attacker can inject arbitrary network packets independent of the network configuration...

OpenBSD OpenSMTPD 6.6 Remote Code Execution Exploit

smtpmailaddr in smtpsession.c in OpenSMTPD version 6.6, as used in OpenBSD version 6.6 and other products, allows remote attackers to execute arbitrary commands as root via a crafted SMTP session, as demonstrated by shell metacharacters in a MAIL FROM field. This affects the "uncommented" default...

OpenBSD OpenSMTPD 6.6 Remote Code Execution

Exploit Title: OpenBSD OpenSMTPD Remote Code Execution Vulnerability Date: 05/04/2021 Exploit Author: Tobias Marcotto Tested on: Kali Linux x64 Version: 6.6 Description: smtpmailaddr in smtpsession.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote attackers to execute...