NE
Product
Netbsd
168
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 10Medium 3Low 1
Watch
Add Netbsd to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-1999-0367 | – | Feb 9 | NetBSD netstat command allows local users to access kernel memory Affected: 2.0.4 |
| CVE-1999-1409 | – | Jul 3 | The at program in IRIX 6.2 and NetBSD 1.3.2 and earlier allows local users to read portions of arbitrary files by submitting the file to at with the -f argument, which generates… Affected: through 1.3.2; 1.0; 1.1; 1.2; 1.2.1; 1.3; +1 more |
| CVE-1999-0303 | – | May 21 | Buffer overflow in BNU UUCP daemon (uucpd) through long hostnames Affected: 1.3; 1.3.1 |
| CVE-1999-0010 | – | Apr 8 | Denial of Service vulnerability in BIND 8 Releases via maliciously formatted DNS messages Affected: 1.3; 1.3.1 |
| CVE-1999-0009 | – | Apr 8 | Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases Affected: 1.0; 1.1; 1.2; 1.2.1; 1.3; 1.3.1 |
| CVE-1999-0323 | – | Feb 20 | FreeBSD mmap function allows users to modify append-only or immutable files Affected: 2.0.4 |
| CVE-1999-0304 | – | Feb 1 | mmap function in BSD allows local attackers in the kmem group to modify memory through devices Affected: 2.0.4 |
| CVE-1999-0513 | – | Jan 5 | ICMP messages to broadcast addresses are allowed, allowing for a Smurf attack that can cause a denial of service Affected: 1.2 |
| CVE-1999-0015 | – | Dec 16 | Teardrop IP denial of service Affected: 1.0; 1.1; 1.2; 1.2.1 |
| CVE-1999-0017 | – | Dec 10 | FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce Affected: 1.0; 1.1; 1.2; 1.2.1 |
| CVE-1999-0016 | – | Dec 1 | Land IP denial of service Affected: 1.0; 1.1 |
| CVE-1999-1214 | – | Sep 15 | The asynchronous I/O facility in 4.4 BSD kernel does not check user credentials when setting the recipient of I/O notification, which allows local users to cause a denial of… Affected: 2.0.4 |
| CVE-1999-1225 | – | Aug 24 | rpc.mountd on Linux, Ultrix, and possibly other operating systems, allows remote attackers to determine the existence of a file on the server by attempting to mount that file,… Affected: 2.0.4 |
| CVE-1999-0628 | – | Jul 1 | The rwho/rwhod service is running, which exposes machine status and user information Affected: 2.0.4 |
| CVE-1999-0074 | – | Jul 1 | Listening TCP ports are sequentially allocated, allowing spoofing attacks Affected: 2.0.4 |
| CVE-1999-0046 | – | Feb 6 | Buffer overflow of rlogin program using TERM environmental variable Affected: 1.0; 1.1 |
| CVE-1999-0297 | – | Dec 12 | Buffer overflow in Vixie Cron library up to version 3.0 allows local users to obtain root access via a long environmental variable Affected: 2.0.4 |
| CVE-1999-0085 | – | Aug 21 | Buffer overflow in rwhod on AIX and other operating systems allows remote attackers to execute arbitrary code via a UDP packet with a long hostname Affected: 2.0.4 |