Freebsd: Security Vulnerabilities
FreeBSD 4.1.1 and earlier, and possibly other BSD-based OSes, uses an insufficient random number generator to generate initial TCP sequence numbers (ISN), which allows remote attackers to spoof TCP connections.
CVSS Score
7.5
EPSS Score
0.055
Published
2000-12-19
Buffer overflow in ncurses library allows local users to execute arbitrary commands via long environmental information such as TERM or TERMINFO_DIRS.
CVSS Score
7.2
EPSS Score
0.007
Published
2000-12-19
Format string vulnerability in pw_error function in BSD libutil library allows local users to gain root privileges via a malformed password in commands such as chpass or passwd.
CVSS Score
7.2
EPSS Score
0.017
Published
2000-12-19
Format string vulnerability in top program allows local attackers to gain root privileges via the "kill" or "renice" function.
CVSS Score
7.2
EPSS Score
0.009
Published
2000-12-11
Buffer overflow in catopen() function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to gain root privileges via a long environmental variable.
CVSS Score
7.2
EPSS Score
0.004
Published
2000-12-11
The catopen function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to read arbitrary files via the LANG environmental variable.
CVSS Score
7.2
EPSS Score
0.004
Published
2000-12-11
The setlocale function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to read arbitrary files via the LANG environmental variable.
CVSS Score
7.2
EPSS Score
0.004
Published
2000-12-11
The getnameinfo function in FreeBSD 4.1.1 and earlier, and possibly other operating systems, allows a remote attacker to cause a denial of service via a long DNS hostname.
CVSS Score
5.0
EPSS Score
0.017
Published
2000-12-11
Multiple buffer overflows in eject on FreeBSD and possibly other OSes allows local users to gain root privileges.
CVSS Score
7.2
EPSS Score
0.004
Published
2000-11-14
FreeBSD 5.x, 4.x, and 3.x allows local users to cause a denial of service by executing a program with a malformed ELF image header.
CVSS Score
2.1
EPSS Score
0.003
Published
2000-10-20