NE
Product
Netbsd
168
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 10Medium 3Low 1
Watch
Add Netbsd to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2002-1490 | – | Apr 2 | NetBSD 1.4 through 1.6 beta allows local users to cause a denial of service (kernel panic) via a series of calls to the TIOCSCTTY ioctl, which causes an integer overflow in a… Affected: 1.4; 1.4; 1.4; 1.4; 1.4; 1.4.1; +18 more |
| CVE-2002-1543 | – | Mar 31 | Buffer overflow in trek on NetBSD 1.5 through 1.5.3 allows local users to gain privileges via long keyboard input Affected: 1.5; 1.5.1; 1.5.2; 1.5.3; 1.6 |
| CVE-2003-0102 | – | Mar 18 | Buffer overflow in tryelf() in readelf.c of the file command allows attackers to execute arbitrary code as the user running file, possibly via a large entity size value in an ELF… Affected: 1.5; 1.5.1; 1.5.2; 1.5.3; 1.6 |
| CVE-2002-1337 | – | Mar 7 | Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related to sender and recipient header comments… Affected: 1.5; 1.5.1; 1.5.2; 1.5.3; 1.6 |
| CVE-2003-0001 | – | Jan 17 | Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows remote attackers to obtain information from previous packets or… Affected: 1.5; 1.5.1; 1.5.2; 1.5.3; 1.6 |
| CVE-2002-2092 | – | Dec 31 | Race condition in exec in OpenBSD 4.0 and earlier, NetBSD 1.5.2 and earlier, and FreeBSD 4.4 and earlier allows local users to gain privileges by attaching a debugger to a process… Affected: 1.3; 1.3.1; 1.3.2; 1.3.3; 1.4; 1.4.1; +5 more |
| CVE-2002-0666 | – | Nov 4 | IPSEC implementations including (1) FreeS/WAN and (2) KAME do not properly calculate the length of authentication data, which allows remote attackers to cause a denial of service… Affected: 1.5; 1.5; 1.5; 1.5.1; 1.5.2; 1.5.3; +1 more |
| CVE-2002-1194 | – | Oct 28 | Buffer overflow in talkd on NetBSD 1.6 and earlier, and possibly other operating systems, may allow remote attackers to execute arbitrary code via a long inbound message Affected: 1.5; 1.5.1; 1.5.2; 1.5.3; 1.6 |
| CVE-2002-1192 | – | Oct 28 | Multiple buffer overflows in rogue on NetBSD 1.6 and earlier, FreeBSD 4.6, and possibly other operating systems, allows local users to gain "games" group privileges via malformed… Affected: 1.5; 1.5.1; 1.5.2; 1.5.3; 1.6 |
| CVE-2002-1165 | – | Oct 11 | Sendmail Consortium's Restricted Shell (SMRSH) in Sendmail 8.12.6, 8.11.6-15, and possibly other versions after 8.11 from 5/19/1998, allows attackers to bypass the intended… Affected: 1.5; 1.5.1; 1.5.2; 1.5.3; 1.6 |
| CVE-2002-0414 | – | Aug 12 | KAME-derived implementations of IPsec on NetBSD 1.5.2, FreeBSD 4.5, and other operating systems, does not properly consult the Security Policy Database (SPD), which could cause a… Affected: 1.5; 1.5.1; 1.5.2 |
| CVE-2000-1208 | – | Aug 12 | Format string vulnerability in startprinting() function of printjob.c in BSD-based lpr lpd package may allow local users to gain privileges via an improper syslog call that uses… Affected: 1.4; 1.4.1; 1.4.2 |
| CVE-2002-0381 | – | Jun 25 | The TCP implementation in various BSD operating systems (tcp_input.c) does not properly block connections to broadcast addresses, which could allow remote attackers to bypass… Affected: 2.0.4 |
| CVE-2002-0004 | – | Feb 27 | Heap corruption vulnerability in the "at" program allows local users to execute arbitrary code via a malformed execution time, which causes at to free the same memory twice Affected: 1.5.2 |
| CVE-2001-0734 | – | Oct 18 | Hitachi Super-H architecture in NetBSD 1.5 and 1.4.1 allows a local user to gain privileges via modified Status Register contents, which are not properly handled by (1) the… Affected: 1.4.1; 1.5 |
| CVE-2001-0670 | – | Oct 3 | Buffer overflow in BSD line printer daemon (in.lpd or lpd) in various BSD-based operating systems allows remote attackers to execute arbitrary code via an incomplete print job… Affected: through 1.5.1 |
| CVE-2001-0710 | – | Sep 20 | NetBSD 1.5 and earlier and FreeBSD 4.3 and earlier allows a remote attacker to cause a denial of service by sending a large number of IP fragments to the machine, exhausting the… Affected: through 1.5 |
| CVE-2001-1091 | – | Aug 23 | The (1) dump and (2) dump_lfs commands in NetBSD 1.4.x through 1.5.1 do not properly drop privileges, which could allow local users to gain privileges via the RCMD_CMD environment… Affected: 1.4; 1.4.1; 1.4.2; 1.4.3; 1.5; 1.5.1 |
| CVE-2001-1145 | – | Aug 17 | fts routines in FreeBSD 4.3 and earlier, NetBSD before 1.5.2, and OpenBSD 2.9 and earlier can be forced to change (chdir) into a different directory than intended when the… Affected: 1.5; 1.5.1 |
| CVE-2001-0554 | – | Aug 14 | Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a set of options including AYT (Are You… Affected: 1.0; 1.1; 1.2; 1.2.1; 1.3; 1.3.1; +8 more |
| CVE-2001-0993 | – | Jul 24 | sendmsg function in NetBSD 1.3 through 1.5 allows local users to cause a denial of service (kernel trap or panic) via a msghdr structure with a large msg_controllen length Affected: 1.3; 1.3.1; 1.3.2; 1.3.3; 1.4; 1.4.1; +3 more |
| CVE-2001-1244 | – | Jul 7 | Multiple TCP implementations could allow remote attackers to cause a denial of service (bandwidth and CPU exhaustion) by setting the maximum segment size (MSS) to a very small… Affected: 1.5; 1.5.1 |
| CVE-2001-0247 | – | Jun 18 | Buffer overflows in BSD-based FTP servers allows remote attackers to execute arbitrary commands via a long pattern string containing a {} sequence, as seen in (1) g_opendir, (2)… Affected: 1.2.1; 1.3; 1.3.1; 1.3.2; 1.3.3; 1.4; +4 more |
| CVE-2001-0268 | – | May 3 | The i386_set_ldt system call in NetBSD 1.5 and earlier, and OpenBSD 2.8 and earlier, when the USER_LDT kernel option is enabled, does not validate a call gate target, which allows… Affected: through 1.5 |
| CVE-2000-0315 | – | Mar 12 | traceroute in NetBSD 1.3.3 and Linux systems allows local unprivileged users to modify the source address of the packets, which could be used in spoofing attacks Affected: through 1.3.3 |
| CVE-2000-0314 | – | Mar 12 | traceroute in NetBSD 1.3.3 and Linux systems allows local users to flood other systems by providing traceroute with a large waittime (-w) option, which is not parsed properly and… Affected: through 1.3.3 |
| CVE-2001-0033 | – | Feb 16 | KTH Kerberos IV allows local users to change the configuration of a Kerberos server running at an elevated privilege by specifying an alternate directory using with the KRBCONFDIR… Affected: 1.5 |
| CVE-2001-0053 | – | Feb 12 | One-byte buffer overflow in replydirname function in BSD-based ftpd allows remote attackers to gain root privileges Affected: 1.4; 1.4.1; 1.4.2; 1.5 |
| CVE-2000-0997 | – | Dec 19 | Format string vulnerabilities in eeprom program in OpenBSD, NetBSD, and possibly other operating systems allows local attackers to gain root privileges Affected: 1.4; 1.4.1; 1.4.2 |
| CVE-2000-0993 | – | Dec 19 | Format string vulnerability in pw_error function in BSD libutil library allows local users to gain root privileges via a malformed password in commands such as chpass or passwd Affected: 1.4; 1.4.1; 1.4.2 |
| CVE-2000-0751 | – | Oct 20 | mopd (Maintenance Operations Protocol loader daemon) does not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary commands Affected: 1.4.1; 1.4.2 |
| CVE-2000-0750 | – | Oct 20 | Buffer overflow in mopd (Maintenance Operations Protocol loader daemon) allows remote attackers to execute arbitrary commands via a long file name Affected: 1.4.1; 1.4.2 |
| CVE-2000-0461 | – | May 29 | The undocumented semconfig system call in BSD freezes the state of semaphores, which allows local users to cause a denial of service of the semaphore system by using the semconfig… Affected: 1.4.1; 1.4.1; 1.4.1; 1.4.2; 1.4.2; 1.4.2; +1 more |
| CVE-2000-0462 | – | May 28 | ftpd in NetBSD 1.4.2 does not properly parse entries in /etc/ftpchroot and does not chroot the specified users, which allows those users to access other files outside of their… Affected: 1.4.2; 1.4.2; 1.4.2; 1.4.2 |
| CVE-2000-0456 | – | May 28 | NetBSD 1.4.2 and earlier allows local users to cause a denial of service by repeatedly running certain system calls in the kernel which do not yield the CPU, aka "cpu-hog" Affected: 1.4.1; 1.4.1; 1.4.1; 1.4.1; 1.4.2; 1.4.2; +2 more |
| CVE-2000-0440 | – | May 1 | NetBSD 1.4.2 and earlier allows remote attackers to cause a denial of service by sending a packet with an unaligned IP timestamp option Affected: 1.4.1; 1.4.2 |
| CVE-2000-0094 | – | Feb 16 | procfs in BSD systems allows local users to gain root privileges by modifying the /proc/pid/mem interface via a modified file descriptor for stderr Affected: 1.4.1 |
| CVE-2000-0157 | – | Feb 1 | NetBSD ptrace call on VAX allows local users to gain privileges by modifying the PSL contents in the debugging process Affected: 1.4.1 |
| CVE-2000-0092 | – | Jan 19 | The BSD make program allows local users to modify files via a symlink attack when the -j option is being used Affected: 1.4.1 |
| CVE-2000-0489 | – | Sep 5 | FreeBSD, NetBSD, and OpenBSD allow an attacker to cause a denial of service by creating a large number of socket pairs using the socketpair function, setting a large buffer size… Affected: 1.4; 1.4.1; 1.4.1; 1.4.1; 1.4.1; 1.4.2; +3 more |
| CVE-1999-0674 | – | Aug 9 | The BSD profil system call allows a local user to modify the internal data space of a program via profiling and execve Affected: 1.0; 1.1; 1.2; 1.2.1; 1.3; 1.3.1; +3 more |
| CVE-1999-1518 | – | Jul 15 | Operating systems with shared memory implementations based on BSD 4.4 code allow a user to conduct a denial of service and bypass memory limits (e.g., as specified with rlimits)… Affected: 1.3.1; 1.3.2; 1.3.3; 1.4 |
| CVE-1999-0764 | – | May 1 | NetBSD allows ARP packets to overwrite static ARP entries Affected: 1.3 |
| CVE-1999-0763 | – | May 1 | NetBSD on a multi-homed host allows ARP packets on one network to modify ARP entries on another connected network Affected: 1.3 |
| CVE-1999-0466 | – | Apr 21 | The SVR4 /dev/wabi special device file in NetBSD 1.3.3 and earlier allows a local user to read or write arbitrary files on the disk associated with that device Affected: 1.3; 1.3.1; 1.3.2; 1.3.3 |
| CVE-1999-0446 | – | Apr 12 | Local users can perform a denial of service in NetBSD 1.3.3 and earlier versions by creating an unusual symbolic link with the ln command, triggering a bug in VFS Affected: 1.3.1; 1.3.2; 1.3.3 |
| CVE-1999-0434 | – | Mar 30 | XFree86 xfs command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial… Affected: 1.3.3 |
| CVE-1999-0433 | – | Mar 21 | XFree86 startx command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a… Affected: 1.3.2; 1.3.3 |
| CVE-1999-0422 | – | Mar 17 | In some cases, NetBSD 1.3.3 mount allows local users to execute programs in some file systems that have the "noexec" flag set Affected: 1.3.3 |
| CVE-1999-0396 | – | Feb 17 | A race condition between the select() and accept() calls in NetBSD TCP servers allows remote attackers to cause a denial of service Affected: 2.0.4 |