openbsd openbsd 4.5 vulnerabilities and exploits

(subscribe to this query)

OpenBSD 4.4, 4.5, and 4.6, when running on an i386 kernel, does not properly handle XMM exceptions, which allows local users to cause a denial of service (kernel panic) via unspecified vectors.

Openbsd Openbsd 4.5 Openbsd Openbsd 4.4 Openbsd Openbsd 4.6

The pf_test_rule function in OpenBSD Packet Filter (PF), as used in OpenBSD 4.2 up to and including 4.5, NetBSD 5.0 before RC3, MirOS 10 and previous versions, and MidnightBSD 0.3-current allows remote malicious users to cause a denial of service (panic) via crafted IP packets th...

Netbsd Netbsd 5.0 Midnightbsd Midnightbsd 0.3-current Mirbsd Miros Openbsd Openbsd 4.2 Openbsd Openbsd 4.3 Openbsd Openbsd 4.4 Openbsd Openbsd 4.5

3 EDB exploits

OpenSSH 4.4 up to versions prior to 4.9 allows remote authenticated users to bypass the sshd_config ForceCommand directive by modifying the .ssh/rc session file.

Openbsd Openssh 4.4 Openbsd Openssh 4.4p1 Openbsd Openssh 4.5 Openbsd Openssh 4.6 Openbsd Openssh 4.7 Openbsd Openssh 4.8

1 Github repository

ssh in OpenSSH prior to 4.7 does not properly handle when an untrusted cookie cannot be created and uses a trusted X11 cookie instead, which allows malicious users to violate intended policy and gain privileges by causing an X client to be treated as trusted.

Openbsd Openssh 4.3p2 Openbsd Openssh 4.3p1 Openbsd Openssh 4.0 Openbsd Openssh 4.3 Openbsd Openssh 4.2p1 Openbsd Openssh 4.4p1 Openbsd Openssh 4.4 Openbsd Openssh 4.1 Openbsd Openssh 4.0p1 Openbsd Openssh Openbsd Openssh 4.5 Openbsd Openssh 4.2 Openbsd Openssh 4.1p1

Format string vulnerabilities in OpenBSD ssh program (and possibly other BSD-based operating systems) allow malicious users to gain root privileges.

Openbsd Openssh 4.5

packet.c in ssh in OpenSSH allows remote malicious users to cause a denial of service (crash) by sending an invalid protocol sequence with USERAUTH_SUCCESS before NEWKEYS, which causes newkeys[mode] to be NULL.

Openbsd Openssh 4.5

FreeBSD 4.5 and previous versions, and possibly other BSD-based operating systems, allows local users to write to or read from restricted files by closing the file descriptors 0 (standard input), 1 (standard output), or 2 (standard error), which may then be reused by a called set...

Freebsd Freebsd 4.5 Openbsd Openbsd 2.0 Openbsd Openbsd 2.2 Sun Sunos -Sun Solaris 7.0 Openbsd Openbsd 2.3 Sun Sunos 5.5.1 Sun Solaris 2.5.1 Sun Solaris 2.6 Freebsd Freebsd 4.4 Sun Solaris 8.0 Openbsd Openbsd 2.1 Sun Sunos 5.7 Sun Sunos 5.8

1 EDB exploit

BIND 8.3.x up to and including 8.3.3 allows remote malicious users to cause a denial of service (termination due to assertion failure) via a request for a subdomain that does not exist, with an OPT resource record with a large UDP payload size.

Isc Bind 8.3.3 Isc Bind 8.3.1 Isc Bind 8.3.2 Isc Bind 8.3.0 Openbsd Openbsd 3.2 Openbsd Openbsd 3.0 Openbsd Openbsd 3.1 Freebsd Freebsd 4.4 Freebsd Freebsd 4.5 Freebsd Freebsd 4.6 Freebsd Freebsd 4.7

1 EDB exploit

libutil in OpenSSH on FreeBSD 4.4 and previous versions does not drop privileges before verifying the capabilities for reading the copyright and welcome files, which allows local users to bypass the capabilities checks and read arbitrary files by specifying alternate copyright or...

Openbsd Openssh 4.5 Freebsd Freebsd

1 EDB exploit

1 2 3 4 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook