freebsd freebsd 6.0 vulnerabilities and exploits

(subscribe to this query)

5

CVSSv2

A logic error in the IP fragment cache functionality in pf in FreeBSD 5.3, 5.4, and 6.0, and OpenBSD, when a 'scrub fragment crop' or 'scrub fragment drop-ovl' rule is being used, allows remote malicious users to cause a denial of service (crash) via crafted p...

Freebsd Freebsd 5.3 Freebsd Freebsd 6.0 Freebsd Freebsd 5.4

6.4

CVSSv2

The build process for ypserv in FreeBSD 5.3 up to 6.1 accidentally disables access restrictions when using the /var/yp/securenets file, which allows remote malicious users to bypass intended access restrictions.

Freebsd Freebsd 5.4 Freebsd Freebsd 6.1 Freebsd Freebsd 5.3 Freebsd Freebsd 6.0

7.2

CVSSv2

Multiple unspecified vulnerabilities in FreeBSD 6 prior to 6.4-STABLE, 6.3 prior to 6.3-RELEASE-p7, 6.4 prior to 6.4-RELEASE-p1, 7.0 prior to 7.0-RELEASE-p7, 7.1 prior to 7.1-RC2, and 7 prior to 7.1-PRERELEASE allow local users to gain privileges via unknown attack vectors relate...

Freebsd Freebsd 6.0 Freebsd Freebsd 6.3 Freebsd Freebsd 7.0 Freebsd Freebsd 7.1 Freebsd Freebsd 6.4

1 EDB exploit

2.1

CVSSv2

The ptsname function in FreeBSD 6.0 up to and including 7.0-PRERELEASE does not properly verify that a certain portion of a device name is associated with a pty of a user who is calling the pt_chown function, which might allow local users to read data from the pty from another us...

Freebsd Freebsd 6.1 Freebsd Freebsd 7.0 Freebsd Freebsd 6.0 Freebsd Freebsd 6.2 Freebsd Freebsd 6.3

2.1

CVSSv2

FreeBSD kernel 5.4-STABLE and 6.0 does not completely initialize a buffer before making it available to userland, which could allow local users to read portions of kernel memory.

Freebsd Freebsd 5.4 Freebsd Freebsd 6.0

2.1

CVSSv2

A logic error in FreeBSD kernel 5.4-STABLE and 6.0 causes the kernel to calculate an incorrect buffer length, which causes more data to be copied to userland than intended, which could allow local users to read portions of kernel memory.

Freebsd Freebsd 5.4 Freebsd Freebsd 6.0

4.7

CVSSv2

The IATA (ata) driver in FreeBSD 6.0 and 8.0, when read access to /dev is available, allows local users to cause a denial of service (kernel panic) via a certain IOCTL request with a large count, which triggers a malloc call with a large value.

Freebsd Freebsd 6.0 Freebsd Freebsd 8.0

1 EDB exploit

6.9

CVSSv2

The script program in FreeBSD 5.0 up to and including 7.0-PRERELEASE invokes openpty, which creates a pseudo-terminal with world-readable and world-writable permissions when it is not run as root, which allows local users to read data from the terminal of the user running script.

Freebsd Freebsd 6.0 Freebsd Freebsd 6.1 Freebsd Freebsd 6.2 Freebsd Freebsd 7.0 Freebsd Freebsd 5.0 Freebsd Freebsd 5.5

6.4

CVSSv2

Directory traversal vulnerability in smbfs smbfs on FreeBSD 4.10 up to 6.1 allows local users to escape chroot restrictions for an SMB-mounted filesystem via "..\\" sequences. NOTE: this is similar to CVE-2006-1864, but this is a different implementation of smbfs, so it...

Freebsd Freebsd 5.0 Freebsd Freebsd 5.1 Freebsd Freebsd 5.3 Freebsd Freebsd 6.0 Freebsd Freebsd 5.2.1 Freebsd Freebsd 5.4 Freebsd Freebsd 5.2

7.5

CVSSv2

Multiple integer overflows in libc in NetBSD 4.x, FreeBSD 6.x and 7.x, and probably other BSD and Apple Mac OS platforms allow context-dependent malicious users to execute arbitrary code via large values of certain integer fields in the format argument to (1) the strfmon function...

Freebsd Freebsd 6.0 Netbsd Netbsd 4.0 Freebsd Freebsd 6.0 P5 Release Freebsd Freebsd 7.0 Freebsd Freebsd 7.0 Beta4 Freebsd Freebsd 7.0 Releng

1 EDB exploit

Get Started

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook