Netbsd

netbsd

Vendor: Netbsd • 168 CVEs

CVEs (168)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2003-0102 2File Netbsd 2File Netbsd Apr 16, 2026 Mar 18, 2003 N/A· v4 N/A· v3 4.6 MEDIUM· v2 Buffer overflow in tryelf() in readelf.c of the file command allows attackers to execute arbitrary code as the user running file, possibly via a large entity size value in an ELF header (elfhdr.e_shentsize).
CVE-2002-1337 7Gentoo HpNetbsd+4 more 9Alphaserver Sc BsdosHp Ux+6 more Apr 16, 2026 Mar 7, 2003 N/A· v4 N/A· v3 10.0 HIGH· v2 Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related to sender and recipient header comments as processed by the crackaddr function of...Show more Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related to sender and recipient header comments as processed by the crackaddr function of headers.c.Show less
CVE-2003-0001 4Freebsd LinuxMicrosoft+1 more 5Freebsd Linux KernelNetbsd+2 more Apr 16, 2026 Jan 17, 2003 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows remote attackers to obtain information from previous packets or kernel memory by using malformed packets, as d...Show more Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows remote attackers to obtain information from previous packets or kernel memory by using malformed packets, as demonstrated by Etherleak.Show less
CVE-2002-2092 3Freebsd NetbsdOpenbsd 3Freebsd NetbsdOpenbsd Apr 16, 2026 Dec 31, 2002 N/A· v4 N/A· v3 3.7 LOW· v2 Race condition in exec in OpenBSD 4.0 and earlier, NetBSD 1.5.2 and earlier, and FreeBSD 4.4 and earlier allows local users to gain privileges by attaching a debugger to a process before the kernel has determined that th...Show more Race condition in exec in OpenBSD 4.0 and earlier, NetBSD 1.5.2 and earlier, and FreeBSD 4.4 and earlier allows local users to gain privileges by attaching a debugger to a process before the kernel has determined that the process is setuid or setgid.Show less
CVE-2002-1915 3Freebsd NetbsdOpenbsd 3Freebsd NetbsdOpenbsd Apr 16, 2026 Dec 31, 2002 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 tip on multiple BSD-based operating systems allows local users to cause a denial of service (execution prevention) by using flock() to lock the /var/log/acculog file.
CVE-2002-0666 6Apple FreebsdFrees Wan+3 more 12Bluefire Ix1035 Router FreebsdFrees Wan+9 more Apr 16, 2026 Nov 4, 2002 N/A· v4 N/A· v3 5.0 MEDIUM· v2 IPSEC implementations including (1) FreeS/WAN and (2) KAME do not properly calculate the length of authentication data, which allows remote attackers to cause a denial of service (kernel panic) via spoofed, short Encapsu...Show more IPSEC implementations including (1) FreeS/WAN and (2) KAME do not properly calculate the length of authentication data, which allows remote attackers to cause a denial of service (kernel panic) via spoofed, short Encapsulating Security Payload (ESP) packets, which result in integer signedness errors.Show less
CVE-2002-1194 1Netbsd 1Netbsd Apr 16, 2026 Oct 28, 2002 N/A· v4 N/A· v3 7.5 HIGH· v2 Buffer overflow in talkd on NetBSD 1.6 and earlier, and possibly other operating systems, may allow remote attackers to execute arbitrary code via a long inbound message.
CVE-2002-1192 2Netbsd Rogue 2Netbsd Rogue Apr 16, 2026 Oct 28, 2002 N/A· v4 N/A· v3 4.6 MEDIUM· v2 Multiple buffer overflows in rogue on NetBSD 1.6 and earlier, FreeBSD 4.6, and possibly other operating systems, allows local users to gain "games" group privileges via malformed entries in a game save file.
CVE-2002-1165 2Netbsd Sendmail 2Netbsd Sendmail Apr 16, 2026 Oct 11, 2002 N/A· v4 N/A· v3 4.6 MEDIUM· v2 Sendmail Consortium's Restricted Shell (SMRSH) in Sendmail 8.12.6, 8.11.6-15, and possibly other versions after 8.11 from 5/19/1998, allows attackers to bypass the intended restrictions of smrsh by inserting additional c...Show more Sendmail Consortium's Restricted Shell (SMRSH) in Sendmail 8.12.6, 8.11.6-15, and possibly other versions after 8.11 from 5/19/1998, allows attackers to bypass the intended restrictions of smrsh by inserting additional commands after (1) "\|\|" sequences or (2) "/" characters, which are not properly filtered or verified.Show less
CVE-2002-0414 3Freebsd NetbsdOpenbsd 3Freebsd NetbsdOpenbsd Apr 16, 2026 Aug 12, 2002 N/A· v4 N/A· v3 7.5 HIGH· v2 KAME-derived implementations of IPsec on NetBSD 1.5.2, FreeBSD 4.5, and other operating systems, does not properly consult the Security Policy Database (SPD), which could cause a Security Gateway (SG) that does not use E...Show more KAME-derived implementations of IPsec on NetBSD 1.5.2, FreeBSD 4.5, and other operating systems, does not properly consult the Security Policy Database (SPD), which could cause a Security Gateway (SG) that does not use Encapsulating Security Payload (ESP) to forward forged IPv4 packets.Show less
CVE-2000-1208 4Immunix NetbsdOpenbsd+1 more 4Immunix LinuxNetbsd+1 more Apr 16, 2026 Aug 12, 2002 N/A· v4 N/A· v3 7.2 HIGH· v2 Format string vulnerability in startprinting() function of printjob.c in BSD-based lpr lpd package may allow local users to gain privileges via an improper syslog call that uses format strings from the checkremote() call...Show more Format string vulnerability in startprinting() function of printjob.c in BSD-based lpr lpd package may allow local users to gain privileges via an improper syslog call that uses format strings from the checkremote() call.Show less
CVE-2002-0381 3Freebsd NetbsdOpenbsd 3Freebsd NetbsdOpenbsd Apr 16, 2026 Jun 25, 2002 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The TCP implementation in various BSD operating systems (tcp_input.c) does not properly block connections to broadcast addresses, which could allow remote attackers to bypass intended filters via packets with a unicast l...Show more The TCP implementation in various BSD operating systems (tcp_input.c) does not properly block connections to broadcast addresses, which could allow remote attackers to bypass intended filters via packets with a unicast link layer address and an IP broadcast address.Show less
CVE-2002-0004 8Caldera DebianFreebsd+5 more 9Debian Linux FreebsdLinux+6 more Apr 16, 2026 Feb 27, 2002 N/A· v4 N/A· v3 7.2 HIGH· v2 Heap corruption vulnerability in the "at" program allows local users to execute arbitrary code via a malformed execution time, which causes at to free the same memory twice.
CVE-2001-0734 1Netbsd 1Netbsd Apr 16, 2026 Oct 18, 2001 N/A· v4 N/A· v3 7.2 HIGH· v2 Hitachi Super-H architecture in NetBSD 1.5 and 1.4.1 allows a local user to gain privileges via modified Status Register contents, which are not properly handled by (1) the sigreturn system call or (2) the process_write_...Show more Hitachi Super-H architecture in NetBSD 1.5 and 1.4.1 allows a local user to gain privileges via modified Status Register contents, which are not properly handled by (1) the sigreturn system call or (2) the process_write_regs kernel routine.Show less
CVE-2001-0670 4Bsd FreebsdNetbsd+1 more 4Bsd FreebsdNetbsd+1 more Apr 16, 2026 Oct 3, 2001 N/A· v4 N/A· v3 7.5 HIGH· v2 Buffer overflow in BSD line printer daemon (in.lpd or lpd) in various BSD-based operating systems allows remote attackers to execute arbitrary code via an incomplete print job followed by a request to display the printer...Show more Buffer overflow in BSD line printer daemon (in.lpd or lpd) in various BSD-based operating systems allows remote attackers to execute arbitrary code via an incomplete print job followed by a request to display the printer queue.Show less
CVE-2001-0710 2Freebsd Netbsd 2Freebsd Netbsd Apr 16, 2026 Sep 20, 2001 N/A· v4 N/A· v3 5.0 MEDIUM· v2 NetBSD 1.5 and earlier and FreeBSD 4.3 and earlier allows a remote attacker to cause a denial of service by sending a large number of IP fragments to the machine, exhausting the mbuf pool.
CVE-2001-1091 1Netbsd 1Netbsd Apr 16, 2026 Aug 23, 2001 N/A· v4 N/A· v3 7.2 HIGH· v2 The (1) dump and (2) dump_lfs commands in NetBSD 1.4.x through 1.5.1 do not properly drop privileges, which could allow local users to gain privileges via the RCMD_CMD environment variable.
CVE-2001-1145 3Freebsd NetbsdOpenbsd 3Freebsd NetbsdOpenbsd Apr 16, 2026 Aug 17, 2001 N/A· v4 N/A· v3 6.2 MEDIUM· v2 fts routines in FreeBSD 4.3 and earlier, NetBSD before 1.5.2, and OpenBSD 2.9 and earlier can be forced to change (chdir) into a different directory than intended when the directory above the current directory is moved,...Show more fts routines in FreeBSD 4.3 and earlier, NetBSD before 1.5.2, and OpenBSD 2.9 and earlier can be forced to change (chdir) into a different directory than intended when the directory above the current directory is moved, which could cause scripts to perform dangerous actions on the wrong directories.Show less
CVE-2001-0554 9Debian FreebsdIbm+6 more 11Aix Debian LinuxFreebsd+8 more Apr 16, 2026 Aug 14, 2001 N/A· v4 N/A· v3 10.0 HIGH· v2 Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a set of options including AYT (Are You There), which is not properly handled by t...Show more Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a set of options including AYT (Are You There), which is not properly handled by the telrcv function.Show less
CVE-2001-0993 1Netbsd 1Netbsd Apr 16, 2026 Jul 24, 2001 N/A· v4 N/A· v3 2.1 LOW· v2 sendmsg function in NetBSD 1.3 through 1.5 allows local users to cause a denial of service (kernel trap or panic) via a msghdr structure with a large msg_controllen length.

Previous 1...567 8 9 Next