Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

openbsd openbsd 4.1 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2008-1058
The tcp_respond function in netinet/tcp_subr.c in OpenBSD 4.1 and 4.2 allows malicious users to cause a denial of service (panic) via crafted TCP packets. NOTE: some of these details are obtained from third party information.
Openbsd Openbsd 4.1Openbsd Openbsd 4.2
NA
CVE-2007-6700
Cross-site scripting (XSS) vulnerability in cgi-bin/bgplg in the web interface for the BGPD daemon in OpenBSD 4.1 allows remote malicious users to inject arbitrary web script or HTML via the cmd parameter.
Openbsd Openbsd 4.1
NA
CVE-2008-1215
Stack-based buffer overflow in the command_Expand_Interpret function in command.c in ppp (aka user-ppp), as distributed in FreeBSD 6.3 and 7.0, OpenBSD 4.1 and 4.2, and the net/userppp package for NetBSD, allows local users to gain privileges via long commands containing "~&...
Netbsd NetbsdOpenbsd Openbsd 4.1Openbsd Openbsd 4.2Freebsd Freebsd 6.3Freebsd Freebsd 7.0
NA
CVE-2009-0537
Integer overflow in the fts_build function in fts.c in libc in (1) OpenBSD 4.4 and previous versions and (2) Microsoft Interix 6.0 build 10.0.6030.0 allows context-dependent malicious users to cause a denial of service (application crash) via a deep directory tree, related to the...
Openbsd Openbsd 4.1Openbsd Openbsd 3.7Openbsd Openbsd 2.8Openbsd Openbsd 3.8Openbsd OpenbsdOpenbsd Openbsd 3.1Openbsd Openbsd 3.3Openbsd Openbsd 2.9Openbsd Openbsd 2.1Openbsd Openbsd 2.2Openbsd Openbsd 3.9Openbsd Openbsd 2.0Openbsd Openbsd 2.7Openbsd Openbsd 3.2Openbsd Openbsd 2.4Openbsd Openbsd 4.2Openbsd Openbsd 3.6Openbsd Openbsd 3.0Openbsd Openbsd 4.0Openbsd Openbsd 3.5Microsoft Interix 6.0Openbsd Openbsd 2.6
NA
CVE-2011-2168
Multiple integer overflows in the glob implementation in libc in OpenBSD prior to 4.9 might allow context-dependent malicious users to have an unspecified impact via a crafted string, related to the GLOB_APPEND and GLOB_DOOFFS flags, a different issue than CVE-2011-0418.
Openbsd Openbsd 4.1Openbsd Openbsd 3.7Openbsd Openbsd 2.8Openbsd Openbsd 3.8Openbsd Openbsd 4.4Openbsd Openbsd 3.1Openbsd Openbsd 3.3Openbsd Openbsd 2.9Openbsd Openbsd 4.7Openbsd Openbsd 2.1Openbsd Openbsd 2.2Openbsd Openbsd 3.9Openbsd Openbsd 2.0Openbsd Openbsd 2.7Openbsd Openbsd 3.2Openbsd Openbsd 4.5Openbsd Openbsd 2.4Openbsd Openbsd 4.2Openbsd Openbsd 3.6Openbsd Openbsd 3.0Openbsd Openbsd 4.0Openbsd Openbsd 3.5
NA
CVE-2007-4752
ssh in OpenSSH prior to 4.7 does not properly handle when an untrusted cookie cannot be created and uses a trusted X11 cookie instead, which allows malicious users to violate intended policy and gain privileges by causing an X client to be treated as trusted.
Openbsd Openssh 4.3p2Openbsd Openssh 4.3p1Openbsd Openssh 4.0Openbsd Openssh 4.3Openbsd Openssh 4.2p1Openbsd Openssh 4.4p1Openbsd Openssh 4.4Openbsd Openssh 4.1Openbsd Openssh 4.0p1Openbsd OpensshOpenbsd Openssh 4.5Openbsd Openssh 4.2Openbsd Openssh 4.1p1
NA
CVE-2006-5229
OpenSSH portable 4.1 on SUSE Linux, and possibly other platforms and versions, and possibly under limited configurations, allows remote malicious users to determine valid usernames via timing discrepancies in which responses take longer for valid usernames than invalid ones, as d...
Openbsd Openssh 4.1
NA
CVE-2011-5000
The ssh_gssapi_parse_ename function in gss-serv.c in OpenSSH 5.8 and previous versions, when gssapi-with-mic authentication is enabled, allows remote authenticated users to cause a denial of service (memory consumption) via a large value in a certain length field. NOTE: there may...
Openbsd Openssh 5.5Openbsd Openssh 5.4Openbsd Openssh 4.6Openbsd Openssh 4.5Openbsd Openssh 4.0Openbsd Openssh 4.1Openbsd Openssh 3.8.1p1Openbsd Openssh 3.9Openbsd Openssh 3.0p1Openbsd Openssh 3.0.2Openbsd Openssh 3.5p1Openbsd Openssh 3.6Openbsd Openssh 3.2.2Openbsd Openssh 3.2.2p1Openbsd Openssh 1.2.3Openbsd Openssh 1.2.1Openbsd OpensshOpenbsd Openssh 5.1Openbsd Openssh 5.0Openbsd Openssh 4.1p1Openbsd Openssh 4.3p2Openbsd Openssh 4.4
NA
CVE-2008-3259
OpenSSH prior to 5.1 sets the SO_REUSEADDR socket option when the X11UseLocalhost configuration setting is disabled, which allows local users on some platforms to hijack the X11 forwarding port via a bind to a single IP address, as demonstrated on the HP-UX platform.
Openbsd Openssh 1.2.3Openbsd Openssh 1.3Openbsd Openssh 2.3.1Openbsd Openssh 2.5Openbsd Openssh 2.9p2Openbsd Openssh 3.0Openbsd Openssh 3.1p1Openbsd Openssh 3.2Openbsd Openssh 3.5Openbsd Openssh 3.5p1Openbsd Openssh 3.7.1p1Openbsd Openssh 3.7.1p2Openbsd Openssh 4.0Openbsd Openssh 4.0p1Openbsd Openssh 4.4Openbsd Openssh 4.4p1Openbsd Openssh 1.5Openbsd Openssh 1.5.7Openbsd Openssh 2.5.1Openbsd Openssh 2.5.2Openbsd Openssh 3.0.1Openbsd Openssh 3.0.1p1
NA
CVE-2007-2243
OpenSSH 4.6 and previous versions, when ChallengeResponseAuthentication is enabled, allows remote malicious users to determine the existence of user accounts by attempting to authenticate via S/KEY, which displays a different response if the user account exists, a similar issue t...
Openbsd Openssh 2.1Openbsd Openssh 2.1.1Openbsd Openssh 2.9.9Openbsd Openssh 2.9.9p2Openbsd Openssh 3.0p1Openbsd Openssh 3.1Openbsd Openssh 3.3p1Openbsd Openssh 3.4Openbsd Openssh 3.6.1p2Openbsd Openssh 3.7Openbsd Openssh 3.9.1Openbsd Openssh 3.9.1p1Openbsd Openssh 4.3Openbsd Openssh 4.3p1Openbsd Openssh 1.2.27Openbsd Openssh 1.2.3Openbsd Openssh 2.5.2Openbsd Openssh 2.9Openbsd Openssh 3.0.2Openbsd Openssh 3.0.2p1Openbsd Openssh 3.2.3p1Openbsd Openssh 3.3
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook