Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

netbsd netbsd 1.2 vulnerabilities and exploits

(subscribe to this query)
10
CVSSv2
CVE-2003-0694
The prescan function in Sendmail 8.12.9 allows remote malicious users to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c.
Sendmail Advanced Message Server 1.3Sendmail Sendmail 2.6Sendmail Sendmail 8.10Sendmail Sendmail 8.10.1Sendmail Sendmail 8.11.5Sendmail Sendmail 8.11.6Sendmail Sendmail 8.12.7Sendmail Sendmail 3.0Sendmail Sendmail 3.0.1Sendmail Sendmail 8.11.1Sendmail Sendmail 8.11.2Sendmail Sendmail 8.12.2Sendmail Sendmail 8.12.3Sendmail Sendmail 8.12Sendmail Sendmail 8.9.3Sendmail Advanced Message Server 1.2Sendmail Sendmail 3.0.2Sendmail Sendmail 3.0.3Sendmail Sendmail 8.11.3Sendmail Sendmail 8.11.4Sendmail Sendmail 8.12.4Sendmail Sendmail 8.12.5
10
CVSSv2
CVE-2001-0554
Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote malicious users to execute arbitrary commands via a set of options including AYT (Are You There), which is not properly handled by the telrcv function.
Netkit Linux Netkit 0.10Netkit Linux Netkit 0.11Mit Kerberos 1.0Netkit Linux Netkit 0.12Sgi Irix 6.5Mit Kerberos 5 1.2Mit Kerberos 5 1.2.1Mit Kerberos 5 1.2.2Mit Kerberos 5 1.1Mit Kerberos 5 1.1.1Freebsd Freebsd 2.0Freebsd Freebsd 2.0.1Freebsd Freebsd 2.0.5Freebsd Freebsd 2.1Freebsd Freebsd 2.1.0Freebsd Freebsd 2.1.5Freebsd Freebsd 2.1.6Freebsd Freebsd 2.1.6.1Freebsd Freebsd 2.1.7Freebsd Freebsd 2.1.7.1Freebsd Freebsd 2.2Freebsd Freebsd 2.2.1
10
CVSSv2
CVE-2001-0247
Buffer overflows in BSD-based FTP servers allows remote malicious users to execute arbitrary commands via a long pattern string containing a {} sequence, as seen in (1) g_opendir, (2) g_lstat, (3) g_stat, and (4) the glob0 buffer as used in the glob functions glob2 and glob3.
Mit Kerberos 5 1.2.1Mit Kerberos 5 1.2.2Sgi Irix 6.5.3Sgi Irix 6.5.3fSgi Irix 6.5.1Sgi Irix 6.5.10Sgi Irix 6.5.5Sgi Irix 6.5.6Mit Kerberos 5 1.1.1Sgi Irix 6.1Sgi Irix 6.5.3mSgi Irix 6.5.4Mit Kerberos 5 1.2Sgi Irix 6.5.11Sgi Irix 6.5.2mSgi Irix 6.5.7Sgi Irix 6.5.8Freebsd Freebsd 2.2Freebsd Freebsd 3.1Freebsd Freebsd 2.2.5Freebsd Freebsd 2.2.6Freebsd Freebsd 3.5
10
CVSSv2
CVE-1999-0009
Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases.
Sgi Irix 3.3.1Sgi Irix 3.3.2Sgi Irix 3.3.3Sgi Irix 4.0Sgi Irix 4.0.5fSgi Irix 4.0.5gSgi Irix 4.0.5hSgi Irix 5.0Data General Dg Ux 5.4 3.1Data General Dg Ux 5.4 4.1Data General Dg Ux 5.4 4.11Isc Bind 4.9.6Sgi Irix 4.0.4bSgi Irix 4.0.4tSgi Irix 4.0.5Sgi Irix 4.0.5 IopSgi Irix 5.3Sgi Irix 6.0Sgi Irix 6.1Sgi Irix 6.2Sgi Irix 6.3Isc Bind 8.1.1
7.5
CVSSv2
CVE-2003-0681
A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets (1) recipient (2), final, or (3) mailer-specific envelope recipients, has unknown consequences.
Sendmail Advanced Message Server 1.2Sendmail Advanced Message Server 1.3Sendmail Sendmail 8.10Sendmail Sendmail 8.10.1Sendmail Sendmail 8.11.5Sendmail Sendmail 8.11.6Sendmail Sendmail 8.12.6Sendmail Sendmail 8.12.7Sendmail Sendmail 8.8.8Sendmail Sendmail 8.9.0Sendmail Sendmail Switch 2.1.1Sendmail Sendmail Switch 2.1.2Sendmail Sendmail Switch 2.2.3Sendmail Sendmail Switch 2.2.4Sendmail Sendmail 2.6.2Sendmail Sendmail 3.0Sendmail Sendmail 3.0.1Sendmail Sendmail 8.11.1Sendmail Sendmail 8.11.2Sendmail Sendmail 8.12.2Sendmail Sendmail 8.12.3Sendmail Sendmail 8.12
7.5
CVSSv2
CVE-2000-0751
mopd (Maintenance Operations Protocol loader daemon) does not properly cleanse user-injected format strings, which allows remote malicious users to execute arbitrary commands.
Openbsd Openbsd 2.7Redhat Linux 6.1Redhat Linux 6.2Netbsd Netbsd 1.4.1Netbsd Netbsd 1.4.2Openbsd Openbsd 2.4Openbsd Openbsd 2.5Openbsd Openbsd 2.6Redhat Linux 6.0
7.5
CVSSv2
CVE-1999-0434
XFree86 xfs command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial of service.
Debian Debian Linux 2.0Debian Debian Linux 2.1Netbsd Netbsd 1.3.3Redhat Linux 5.1Caldera Openlinux 1.2Suse Suse Linux 5.3
7.5
CVSSv2
CVE-1999-0017
FTP servers can allow an malicious user to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce.
Gnu Inet 5.01Gnu Inet 6.01Washington University Wu-ftpd 2.4Gnu Inet 6.02Sun Sunos 5.5Ibm Aix 4.3Sco Open Desktop 3.0Sun Sunos 5.3Caldera Openlinux 1.2Sun Sunos 4.1.4Ibm Aix 4.2Netbsd Netbsd 1.2.1Freebsd Freebsd 2.1.7Siemens Reliant UnixNetbsd Netbsd 1.0Sun Sunos 5.4Freebsd Freebsd 1.1Freebsd Freebsd 1.2Freebsd Freebsd 2.1.0Sun Sunos 4.1.3u1Netbsd Netbsd 1.1Netbsd Netbsd 1.2
7.2
CVSSv2
CVE-2004-2012
The systrace_exit function in the systrace utility for NetBSD-current and 2.0 before April 16, 2004, and certain FreeBSD ports, does not verify the owner of the /dec/systrace connection before setting euid to 0, which allows local users to gain root privileges.
Niels Provos Systrace 1.2Niels Provos Systrace 1.3Niels Provos Systrace 1.1Vladimir Kotal Systrace Port For Freebsd 2004-03-09Vladimir Kotal Systrace Port For Freebsd 2004-06-02Niels Provos Systrace 1.4Niels Provos Systrace 1.5Netbsd Netbsd 2.0
7.2
CVSSv2
CVE-1999-0674
The BSD profil system call allows a local user to modify the internal data space of a program via profiling and execve.
Netbsd Netbsd 1.3.3Netbsd Netbsd 1.4Openbsd Openbsd 2.0Openbsd Openbsd 2.1Sun Sunos -Sun Sunos 5.7Sun Solaris 7.0Netbsd Netbsd 1.3Netbsd Netbsd 1.3.2Openbsd Openbsd 2.2Openbsd Openbsd 2.4Sun Sunos 5.1Sun Sunos 5.5Sun Solaris 2.5Netbsd Netbsd 1.0Netbsd Netbsd 1.1Netbsd Netbsd 1.2Sun Sunos 5.2Sun Sunos 5.3Sun Sunos 5.4Sun Solaris 2.4Netbsd Netbsd 1.2.1
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionfirmwareCVE-2006-4304CVE-2024-32878CVE-2024-31502XSSCVE-2024-3059CVE-2024-33692CVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook