Openbsd

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2001-0554 9Debian FreebsdIbm+6 more 11Aix Debian LinuxFreebsd+8 more Apr 16, 2026 Aug 14, 2001 N/A· v4 N/A· v3 10.0 HIGH· v2 Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a set of options including AYT (Are You There), which is not properly handled by t...Show more Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a set of options including AYT (Are You There), which is not properly handled by the telrcv function.Show less
CVE-2001-0529 1Openbsd 1Openssh Apr 16, 2026 Aug 14, 2001 N/A· v4 N/A· v3 7.2 HIGH· v2 OpenSSH version 2.9 and earlier, with X forwarding enabled, allows a local attacker to delete any file named 'cookies' via a symlink attack.
CVE-2001-1244 7Freebsd HpLinux+4 more 9Freebsd Hp UxLinux Kernel+6 more Apr 16, 2026 Jul 7, 2001 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Multiple TCP implementations could allow remote attackers to cause a denial of service (bandwidth and CPU exhaustion) by setting the maximum segment size (MSS) to a very small number and requesting large amounts of data,...Show more Multiple TCP implementations could allow remote attackers to cause a denial of service (bandwidth and CPU exhaustion) by setting the maximum segment size (MSS) to a very small number and requesting large amounts of data, which generates more packets with less TCP-level data that amplify network traffic and consume more server CPU to process.Show less
CVE-2001-0378 1Openbsd 1Openbsd Apr 16, 2026 Jun 27, 2001 N/A· v4 N/A· v3 2.1 LOW· v2 readline prior to 4.1, in OpenBSD 2.8 and earlier, creates history files with insecure permissions, which allows a local attacker to recover potentially sensitive information via readline history files.
CVE-2001-0361 2Openbsd Ssh 2Openssh Ssh Apr 16, 2026 Jun 27, 2001 N/A· v4 N/A· v3 4.0 MEDIUM· v2 Implementations of SSH version 1.5, including (1) OpenSSH up to version 2.3.0, (2) AppGate, and (3) ssh-1 up to version 1.2.31, in certain configurations, allow a remote attacker to decrypt and/or alter traffic via a "Bl...Show more Implementations of SSH version 1.5, including (1) OpenSSH up to version 2.3.0, (2) AppGate, and (3) ssh-1 up to version 1.2.31, in certain configurations, allow a remote attacker to decrypt and/or alter traffic via a "Bleichenbacher attack" on PKCS#1 version 1.5.Show less
CVE-2001-1459 1Openbsd 1Openssh Apr 16, 2026 Jun 19, 2001 N/A· v4 N/A· v3 7.5 HIGH· v2 OpenSSH 2.9 and earlier does not initiate a Pluggable Authentication Module (PAM) session if commands are executed with no pty, which allows local users to bypass resource limits (rlimits) set in pam.d.
CVE-2001-0402 3Darren Reed FreebsdOpenbsd 3Freebsd IpfilterOpenbsd Apr 16, 2026 Jun 18, 2001 N/A· v4 N/A· v3 7.5 HIGH· v2 IPFilter 3.4.16 and earlier does not include sufficient session information in its cache, which allows remote attackers to bypass access restrictions by sending fragmented packets to a restricted port after sending unfra...Show more IPFilter 3.4.16 and earlier does not include sufficient session information in its cache, which allows remote attackers to bypass access restrictions by sending fragmented packets to a restricted port after sending unfragmented packets to an unrestricted port.Show less
CVE-2001-0247 5Freebsd MitNetbsd+2 more 5Freebsd IrixKerberos 5+2 more Apr 16, 2026 Jun 18, 2001 N/A· v4 N/A· v3 10.0 HIGH· v2 Buffer overflows in BSD-based FTP servers allows remote attackers to execute arbitrary commands via a long pattern string containing a {} sequence, as seen in (1) g_opendir, (2) g_lstat, (3) g_stat, and (4) the glob0 buf...Show more Buffer overflows in BSD-based FTP servers allows remote attackers to execute arbitrary commands via a long pattern string containing a {} sequence, as seen in (1) g_opendir, (2) g_lstat, (3) g_stat, and (4) the glob0 buffer as used in the glob functions glob2 and glob3.Show less
CVE-2001-1047 1Openbsd 1Openbsd Apr 16, 2026 Jun 2, 2001 N/A· v4 N/A· v3 1.2 LOW· v2 Race condition in OpenBSD VFS allows local users to cause a denial of service (kernel panic) by (1) creating a pipe in one thread and causing another thread to set one of the file descriptors to NULL via a close, or (2)...Show more Race condition in OpenBSD VFS allows local users to cause a denial of service (kernel panic) by (1) creating a pipe in one thread and causing another thread to set one of the file descriptors to NULL via a close, or (2) calling dup2 on a file descriptor in one process, then setting the descriptor to NULL via a close in another process that is created via rfork.Show less
CVE-2001-0284 1Openbsd 1Openbsd Apr 16, 2026 May 3, 2001 N/A· v4 N/A· v3 10.0 HIGH· v2 Buffer overflow in IPSEC authentication mechanism for OpenBSD 2.8 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a malformed Authentication header (AH) IPv4 o...Show more Buffer overflow in IPSEC authentication mechanism for OpenBSD 2.8 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a malformed Authentication header (AH) IPv4 option.Show less
CVE-2001-0268 2Netbsd Openbsd 2Netbsd Openbsd Apr 16, 2026 May 3, 2001 N/A· v4 N/A· v3 7.2 HIGH· v2 The i386_set_ldt system call in NetBSD 1.5 and earlier, and OpenBSD 2.8 and earlier, when the USER_LDT kernel option is enabled, does not validate a call gate target, which allows local users to gain root privileges by c...Show more The i386_set_ldt system call in NetBSD 1.5 and earlier, and OpenBSD 2.8 and earlier, when the USER_LDT kernel option is enabled, does not validate a call gate target, which allows local users to gain root privileges by creating a segment call gate in the Local Descriptor Table (LDT) with a target that specifies an arbitrary kernel address.Show less
CVE-2001-0144 2Openbsd Ssh 2Openssh Ssh Apr 16, 2026 Mar 12, 2001 N/A· v4 N/A· v3 10.0 HIGH· v2 CORE SDI SSH1 CRC-32 compensation attack detector allows remote attackers to execute arbitrary commands on an SSH server or client via an integer overflow.
CVE-2000-0313 1Openbsd 1Openbsd Apr 16, 2026 Mar 12, 2001 N/A· v4 N/A· v3 4.6 MEDIUM· v2 Vulnerability in OpenBSD 2.6 allows a local user to change interface media configurations.
CVE-2000-0312 1Openbsd 1Openbsd Apr 16, 2026 Mar 12, 2001 N/A· v4 N/A· v3 7.2 HIGH· v2 cron in OpenBSD 2.5 allows local users to gain root privileges via an argv[] that is not NULL terminated, which is passed to cron's fake popen function.
CVE-2000-0310 1Openbsd 1Openbsd Apr 16, 2026 Mar 12, 2001 N/A· v4 N/A· v3 5.0 MEDIUM· v2 IP fragment assembly in OpenBSD 2.4 allows a remote attacker to cause a denial of service by sending a large number of fragmented packets.
CVE-2000-0309 1Openbsd 1Openbsd Apr 16, 2026 Mar 12, 2001 N/A· v4 N/A· v3 2.1 LOW· v2 The i386 trace-trap handling in OpenBSD 2.4 with DDB enabled allows a local user to cause a denial of service.
CVE-2001-0053 3David Madore NetbsdOpenbsd 3Ftpd Bsd NetbsdOpenbsd Apr 16, 2026 Feb 12, 2001 N/A· v4 N/A· v3 10.0 HIGH· v2 One-byte buffer overflow in replydirname function in BSD-based ftpd allows remote attackers to gain root privileges.
CVE-2000-1169 1Openbsd 1Openssh Apr 16, 2026 Jan 9, 2001 N/A· v4 N/A· v3 7.5 HIGH· v2 OpenSSH SSH client before 2.3.0 does not properly disable X11 or agent forwarding, which could allow a malicious SSH server to gain access to the X11 display and sniff X11 events, or gain access to the ssh-agent.
CVE-2000-0997 2Netbsd Openbsd 2Netbsd Openbsd Sep 23, 2026 Dec 19, 2000 N/A· v4 N/A· v3 7.2 HIGH· v2 Format string vulnerabilities in eeprom program in OpenBSD, NetBSD, and possibly other operating systems allows local attackers to gain root privileges.
CVE-2000-0996 1Openbsd 1Openbsd Sep 23, 2026 Dec 19, 2000 N/A· v4 N/A· v3 7.2 HIGH· v2 Format string vulnerability in OpenBSD su program (and possibly other BSD-based operating systems) allows local attackers to gain root privileges via a malformed shell.

Previous 1...14 151617 18 Next