Skip to contentOpenbsd vulnerabilities
Newest
- openbsd openssh, conectiva linux, engardelinux secure linux +5 more +7 moreOff-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote...CVE-2002-0083Public exploitEPSS 14.7%9.8 Critical
- openbsd opensshSSH protocol 2 (aka SSH-2) public key authentication in the development snapshot of OpenSSH 2.3.1...CVE-2001-15856.8 Medium
- openbsdThe uipc system calls (uipc_syscalls.c) in OpenBSD 2.9 and 3.0 provide user mode return instead...CVE-2001-1559Public exploit5.5 Medium
- openbsd opensshOpenSSH before 3.0.1 with Kerberos V enabled does not properly authenticate users, which could...CVE-2001-1507Fix available7.5 High
- openbsd openssh, redhat linux +1 moreOpenSSH 3.0.1 and earlier with UseLogin enabled does not properly cleanse critical environment...CVE-2001-08727.2 High
- openbsd opensshOpenSSH before 2.9.9, when running sftp using sftp-server and using restricted keypairs, allows...CVE-2001-08167.5 High
- openbsdvi.recover in OpenBSD before 3.1 allows local users to remove arbitrary zero-byte files such as...CVE-2001-14154.6 Medium
- openbsd opensshOpenSSH before 2.9.9, while using keypairs and multiple keys of different types in the ~/.ssh...CVE-2001-13807.5 High
- bsd, freebsd, netbsd +1 more +3 moreBuffer overflow in BSD line printer daemon (in.lpd or lpd) in various BSD-based operating systems...CVE-2001-06707.5 High
- openbsd opensshThe "echo simulation" traffic analysis countermeasure in OpenSSH before 2.9.9p2 sends an...CVE-2001-13825.0 Medium
- freebsd, openbsd openssh +1 morelibutil in OpenSSH on FreeBSD 4.4 and earlier does not drop privileges before verifying the...CVE-2001-1029Public exploit2.1 Low
- freebsd, netbsd, openbsd +2 morefts routines in FreeBSD 4.3 and earlier, NetBSD before 1.5.2, and OpenBSD 2.9 and earlier can be...CVE-2001-11456.2 Medium
- debian linux, freebsd, ibm aix +8 more +10 moreBuffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote...CVE-2001-0554Public exploitEPSS 38.7%10.0 High
- openbsd opensshOpenSSH version 2.9 and earlier, with X forwarding enabled, allows a local attacker to delete any...CVE-2001-05297.2 High
- openbsd openssh, ssh +1 moreThe SSH protocols 1 and 2 (aka SSH-2) as implemented in OpenSSH and other packages have various...CVE-2001-05727.5 High
- freebsd, hp hp-ux, vvos +6 more +8 moreMultiple TCP implementations could allow remote attackers to cause a denial of service (bandwidth...CVE-2001-1244Public exploitEPSS 22.0%5.0 Medium
- openbsdreadline prior to 4.1, in OpenBSD 2.8 and earlier, creates history files with insecure...CVE-2001-03782.1 Low
- openbsd openssh, ssh +1 moreImplementations of SSH version 1.5, including (1) OpenSSH up to version 2.3.0, (2) AppGate, and ...CVE-2001-03614.0 Medium
- openbsd opensshOpenSSH 2.9 and earlier does not initiate a Pluggable Authentication Module (PAM) session if...CVE-2001-1459Fix available7.5 High
- darren reed ipfilter, freebsd, openbsd +2 moreIPFilter 3.4.16 and earlier does not include sufficient session information in its cache, which...CVE-2001-0402Public exploit7.5 High
- openbsdRace condition in OpenBSD VFS allows local users to cause a denial of service (kernel panic) by ...CVE-2001-10471.2 Low
- freebsd, mit kerberos 5, netbsd +2 more +4 moreBuffer overflows in BSD-based FTP servers allows remote attackers to execute arbitrary commands...CVE-2001-0247Public exploitEPSS 19.3%10.0 High
- openbsdBuffer overflow in IPSEC authentication mechanism for OpenBSD 2.8 and earlier allows remote...CVE-2001-028410.0 High
- netbsd, openbsd +1 moreThe i386_set_ldt system call in NetBSD 1.5 and earlier, and OpenBSD 2.8 and earlier, when the...CVE-2001-02687.2 High
- ssh, openbsd openssh +1 moreCORE SDI SSH1 CRC-32 compensation attack detector allows remote attackers to execute arbitrary...CVE-2001-0144Public exploitEPSS 32.4%10.0 High
- openbsdVulnerability in OpenBSD 2.6 allows a local user to change interface media configurations.CVE-2000-03134.6 Medium
- openbsdIP fragment assembly in OpenBSD 2.4 allows a remote attacker to cause a denial of service by...CVE-2000-03105.0 Medium
- openbsdThe i386 trace-trap handling in OpenBSD 2.4 with DDB enabled allows a local user to cause a...CVE-2000-03092.1 Low
- openbsdcron in OpenBSD 2.5 allows local users to gain root privileges via an argv[] that is not NULL...CVE-2000-03127.2 High
- david madore ftpd-bsd, netbsd, openbsd +2 moreOne-byte buffer overflow in replydirname function in BSD-based ftpd allows remote attackers to...CVE-2001-0053Public exploitEPSS 17.9%10.0 High
- openbsd opensshOpenSSH SSH client before 2.3.0 does not properly disable X11 or agent forwarding, which could...CVE-2000-11697.5 High
- openbsdFormat string vulnerability in OpenBSD su program (and possibly other BSD-based operating systems...CVE-2000-09967.2 High
- openbsdFormat string vulnerability in OpenBSD yp_passwd program (and possibly other BSD-based operating...CVE-2000-09957.2 High
- openbsdFormat string vulnerability in OpenBSD fstat program (and possibly other BSD-based operating...CVE-2000-0994Public exploit7.2 High
- freebsd, netbsd, openbsd +2 moreFormat string vulnerability in pw_error function in BSD libutil library allows local users to...CVE-2000-0993Public exploit7.2 High
- ssh, openbsd openssh +1 moreDirectory traversal vulnerability in scp in sshd 1.2.xx allows a remote malicious scp server to...CVE-2000-0992Public exploitFix available5.0 Medium
- openbsdThe IPSEC implementation in OpenBSD 2.7 does not properly handle empty AH/ESP packets, which...CVE-2000-09625.0 Medium
- openbsdOpenBSD 2.6 and earlier allows remote attackers to cause a denial of service by flooding the...CVE-2000-0914Public exploit5.0 Medium
- openbsd, redhat linux +1 moreFormat string vulnerability in talkd in OpenBSD and possibly other BSD-based OSes allows remote...CVE-2000-101010.0 High
- openbsdFormat string vulnerability in OpenBSD photurisd allows local users to execute arbitrary commands...CVE-2000-10044.6 Medium
- openbsd opensshFormat string vulnerabilities in OpenBSD ssh program (and possibly other BSD-based operating...CVE-2000-0999EPSS 11.9%10.0 High
- netbsd, openbsd +1 moreFormat string vulnerabilities in eeprom program in OpenBSD, NetBSD, and possibly other operating...CVE-2000-09977.2 High
- netbsd, openbsd, redhat linux +2 moremopd (Maintenance Operations Protocol loader daemon) does not properly cleanse user-injected...CVE-2000-0751Public exploit7.5 High
- netbsd, openbsd, redhat linux +2 moreBuffer overflow in mopd (Maintenance Operations Protocol loader daemon) allows remote attackers...CVE-2000-07507.5 High
- openbsd ftpd, washington university wu-ftpd +1 moreFTP servers such as OpenBSD ftpd, NetBSD ftpd, ProFTPd and Opieftpd do not properly cleanse...CVE-2000-0574Public exploitEPSS 58.9%5.0 Medium
- openbsd opensshOpenSSH does not properly drop privileges when the UseLogin option is enabled, which allows local...CVE-2000-052510.0 High
- ssh, openbsd openssh, ssh ssh2 +2 moreThe default configuration of SSH allows X forwarding, which could allow a remote attacker to...CVE-2000-02175.1 Medium
- ssh, openbsd openssh +1 moreThe SSH protocol server sshd allows local users without shell access to redirect a TCP connection...CVE-2000-01434.6 Medium
- freebsd, netbsd, openbsd +2 moreThe BSD make program allows local users to modify files via a symlink attack when the -j option...CVE-2000-00926.2 Medium
- bsdi bsd os, freebsd, openbsd +2 moreip_input.c in BSD-derived TCP/IP implementations allows remote attackers to cause a denial of...CVE-1999-00015.0 Medium
- Show moreLoading…