Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

openbsd openbsd 3.4 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2004-2163
login_radius on OpenBSD 3.2, 3.5, and possibly other versions does not verify the shared secret in a response packet from a RADIUS server, which allows remote malicious users to bypass authentication by spoofing server replies.
Openbsd Openbsd 3.2Openbsd Openbsd 3.4Openbsd Openbsd 3.5
NA
CVE-2004-2230
Heap-based buffer overflow in isakmpd on OpenBSD 3.4 up to and including 3.6 allows local users to cause a denial of service (panic) and corrupt memory via IPSEC credentials on a socket.
Openbsd Openbsd 3.5Openbsd Openbsd 3.6Openbsd Openbsd 3.4
NA
CVE-2004-2338
OpenBSD 3.3 and 3.4 does not properly parse Accept and Deny rules without netmasks on big-endian 64-bit platforms such as SPARC64, which may allow remote malicious users to bypass access restrictions.
Openbsd Openbsd 3.3Openbsd Openbsd 3.4
NA
CVE-2003-0955
OpenBSD kernel 3.3 and 3.4 allows local users to cause a denial of service (kernel panic) and possibly execute arbitrary code in 3.4 via a program with an invalid header that is not properly handled by (1) ibcs2_exec.c in the iBCS2 emulation (compat_ibcs2) or (2) exec_elf.c, whic...
Openbsd Openbsd 3.3Openbsd Openbsd 3.4
NA
CVE-2004-0482
Multiple integer overflows in (1) procfs_cmdline.c, (2) procfs_fpregs.c, (3) procfs_linux.c, (4) procfs_regs.c, (5) procfs_status.c, and (6) procfs_subr.c in procfs for OpenBSD 3.5 and previous versions allow local users to read sensitive kernel memory and possibly perform other ...
Openbsd Openbsd 3.5Openbsd Openbsd 3.4
NA
CVE-2004-0819
The bridge functionality in OpenBSD 3.4 and 3.5, when running a gateway configured as a bridging firewall with the link2 option for IPSec enabled, allows remote malicious users to cause a denial of service (crash) via an ICMP echo (ping) packet.
Openbsd Openbsd 3.2Openbsd Openbsd 3.5Openbsd Openbsd 3.3Openbsd Openbsd 3.4
NA
CVE-2004-1799
PF in certain OpenBSD versions, when stateful filtering is enabled, does not limit packets for a session to the original interface, which allows remote malicious users to bypass intended packet filters via spoofed packets to other interfaces.
Openbsd Openbsd 3.2Openbsd Openbsd 3.3Openbsd Openbsd 3.4Openbsd Openbsd 3.0Openbsd Openbsd 3.1
NA
CVE-2004-0257
OpenBSD 3.4 and NetBSD 1.6 and 1.6.1 allow remote malicious users to cause a denial of service (crash) by sending an IPv6 packet with a small MTU to a listening port and then issuing a TCP connect to that port.
Openbsd Openbsd 3.4Netbsd Netbsd 1.6.1Openbsd Openbsd 3.0Netbsd Netbsd 1.6Openbsd Openbsd 3.1Openbsd Openbsd 3.2Openbsd Openbsd 3.3
NA
CVE-2005-0740
The TCP stack (tcp_input.c) in OpenBSD 3.5 and 3.6 allows remote malicious users to cause a denial of service (system panic) via crafted values in the TCP timestamp option, which causes invalid arguments to be used when calculating the retransmit timeout.
Openbsd Openbsd 2.6Openbsd Openbsd 2.7Openbsd Openbsd 2.8Openbsd Openbsd 2.9Openbsd Openbsd 2.0Openbsd Openbsd 2.1Openbsd Openbsd 3.4Openbsd Openbsd 3.5Openbsd Openbsd 3.6Openbsd Openbsd 2.2Openbsd Openbsd 2.4Openbsd Openbsd 3.1Openbsd Openbsd 3.3Openbsd Openbsd 2.3Openbsd Openbsd 2.5Openbsd Openbsd 3.0Openbsd Openbsd 3.2
NA
CVE-2009-0537
Integer overflow in the fts_build function in fts.c in libc in (1) OpenBSD 4.4 and previous versions and (2) Microsoft Interix 6.0 build 10.0.6030.0 allows context-dependent malicious users to cause a denial of service (application crash) via a deep directory tree, related to the...
Openbsd Openbsd 4.1Openbsd Openbsd 3.7Openbsd Openbsd 2.8Openbsd Openbsd 3.8Openbsd OpenbsdOpenbsd Openbsd 3.1Openbsd Openbsd 3.3Openbsd Openbsd 2.9Openbsd Openbsd 2.1Openbsd Openbsd 2.2Openbsd Openbsd 3.9Openbsd Openbsd 2.0Openbsd Openbsd 2.7Openbsd Openbsd 3.2Openbsd Openbsd 2.4Openbsd Openbsd 4.2Openbsd Openbsd 3.6Openbsd Openbsd 3.0Openbsd Openbsd 4.0Openbsd Openbsd 3.5Microsoft Interix 6.0Openbsd Openbsd 2.6
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionfirmwareCVE-2006-4304CVE-2024-32878CVE-2024-31502XSSCVE-2024-3059CVE-2024-33692CVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook