bsd bsd 4.3 vulnerabilities and exploits

(subscribe to this query)

Buffer overflow in passwd in BSD based operating systems 4.3 and previous versions allows local users to gain root privileges by specifying a long shell or GECOS field.

Bsd Bsd 4.2 Bsd Bsd 4.3

1 Github repository

lpr on SunOS 4.1.1, BSD 4.3, A/UX 2.0.1, and other BSD-based operating systems allows local users to create or overwrite arbitrary files via a symlink attack that is triggered after invoking lpr 1000 times.

Sgi Irix Apple A Ux 2.0.1 Bsd Bsd 4.3 Sun Sunos

The TCP stack in 4.3BSD Net/2, as used in FreeBSD 5.4, NetBSD possibly 2.0, and OpenBSD possibly 3.6, does not properly implement the session timer, which allows remote malicious users to cause a denial of service (resource consumption) via crafted packets.

Bsd Bsd 4.3 Freebsd Freebsd 5.4 Netbsd Netbsd 2.0 Openbsd Openbsd 3.6

Buffer overflow in the lprm command in the lprold lpr package on SuSE 7.1 up to and including 7.3, OpenBSD 3.2 and previous versions, and possibly other operating systems, allows local users to gain root privileges via long command line arguments such as (1) request ID or (2) use...

Lprold Lprold 3.0.48 Bsd Lpr 0.48 Bsd Lpr 2000-05-07 Freebsd Freebsd 2.2 Freebsd Freebsd 2.2.2 Freebsd Freebsd 2.2.3 Freebsd Freebsd 2.2.4 Freebsd Freebsd 2.2.5 Freebsd Freebsd 2.2.6 Openbsd Openbsd 2.0 Openbsd Openbsd 2.1 Openbsd Openbsd 2.2

2 EDB exploits

Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases.

Data General Dg Ux 5.4 3.0 Data General Dg Ux 5.4 3.1 Data General Dg Ux 5.4 4.1 Data General Dg Ux 5.4 4.11 Isc Bind 4.9.6 Isc Bind 8.1 Isc Bind 8.1.1 Sgi Irix 3.2 Sgi Irix 3.3 Sgi Irix 3.3.1 Sgi Irix 3.3.2 Sgi Irix 3.3.3

2 EDB exploits

tip on multiple BSD-based operating systems allows local users to cause a denial of service (execution prevention) by using flock() to lock the /var/log/acculog file.

Freebsd Freebsd 3.5 Freebsd Freebsd 3.5.1 Freebsd Freebsd 4.0 Freebsd Freebsd 4.1 Freebsd Freebsd 4.1.1 Freebsd Freebsd 4.2 Freebsd Freebsd 4.3 Freebsd Freebsd 4.4 Freebsd Freebsd 4.5 Freebsd Freebsd 4.6 Freebsd Freebsd 5.0 Netbsd Netbsd 1.0

The arplookup function in FreeBSD 5.1 and previous versions, Mac OS X prior to 10.2.8, and possibly other BSD-based systems, allows remote attackers on a local subnet to cause a denial of service (resource starvation and panic) via a flood of spoofed ARP requests.

Apple Mac Os X 10.2 Apple Mac Os X 10.2.1 Apple Mac Os X 10.2.2 Apple Mac Os X 10.2.3 Apple Mac Os X 10.2.4 Apple Mac Os X 10.2.5 Apple Mac Os X 10.2.6 Apple Mac Os X 10.2.7 Apple Mac Os X Server 10.2 Apple Mac Os X Server 10.2.1 Apple Mac Os X Server 10.2.2 Apple Mac Os X Server 10.2.3

Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote malicious users to execute arbitrary commands via a set of options including AYT (Are You There), which is not properly handled by the telrcv function.

Mit Kerberos 1.0 Mit Kerberos 5 1.1 Mit Kerberos 5 1.1.1 Mit Kerberos 5 1.2 Mit Kerberos 5 1.2.1 Mit Kerberos 5 1.2.2 Netkit Linux Netkit 0.10 Netkit Linux Netkit 0.11 Netkit Linux Netkit 0.12 Sgi Irix 6.5 Freebsd Freebsd 2.0 Freebsd Freebsd 2.0.1

1 EDB exploit

The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other operating systems allows remote malicious users to cause a denial of service (connection queue exhaustion) via multiple vectors that manipulate info...

Bsd Bsd -Bsd Bsd 4.1 Bsd Bsd 4.2 Bsd Bsd 4.3 Bsd Bsd 4.4 Bsdi Bsd Os -Bsdi Bsd Os 1.1 Bsdi Bsd Os 2.0 Bsdi Bsd Os 2.0.1 Bsdi Bsd Os 2.1 Bsdi Bsd Os 3.0 Bsdi Bsd Os 3.1

2 Github repositories

jQuery prior to 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.

Jquery Jquery Debian Debian Linux 8.0 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Drupal Drupal Backdropcms Backdrop Fedoraproject Fedora 28 Fedoraproject Fedora 29 Fedoraproject Fedora 30 Opensuse Backports Sle 15.0 Opensuse Leap 15.1 Netapp Oncommand System Manager

408 Github repositories

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook