Vulnerabilities (CVE)

Filtered by vendor Openbsd Subscribe
Filtered by product Openbsd
Total 193 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2003-0804 3 Apple, Freebsd, Openbsd 4 Mac Os X, Mac Os X Server, Freebsd and 1 more 2008-09-10 5.0 MEDIUM N/A
The arplookup function in FreeBSD 5.1 and earlier, Mac OS X before 10.2.8, and possibly other BSD-based systems, allows remote attackers on a local subnet to cause a denial of service (resource starvation and panic) via a flood of spoofed ARP requests.
CVE-2002-0766 1 Openbsd 1 Openbsd 2008-09-10 7.2 HIGH N/A
OpenBSD 2.9 through 3.1 allows local users to cause a denial of service (resource exhaustion) and gain root privileges by filling the kernel's file descriptor table and closing file descriptors 0, 1, or 2 before executing a privileged process, which is not properly handled when OpenBSD fails to open an alternate descriptor.
CVE-2002-0765 1 Openbsd 2 Openbsd, Openssh 2008-09-10 7.5 HIGH N/A
sshd in OpenSSH 3.2.2, when using YP with netgroups and under certain conditions, may allow users to successfully authenticate and log in with another user's password.
CVE-2001-1145 3 Freebsd, Netbsd, Openbsd 3 Freebsd, Netbsd, Openbsd 2008-09-10 6.2 MEDIUM N/A
fts routines in FreeBSD 4.3 and earlier, NetBSD before 1.5.2, and OpenBSD 2.9 and earlier can be forced to change (chdir) into a different directory than intended when the directory above the current directory is moved, which could cause scripts to perform dangerous actions on the wrong directories.
CVE-2001-0284 1 Openbsd 1 Openbsd 2008-09-10 10.0 HIGH N/A
Buffer overflow in IPSEC authentication mechanism for OpenBSD 2.8 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a malformed Authentication header (AH) IPv4 option.
CVE-2000-0750 3 Netbsd, Openbsd, Redhat 3 Netbsd, Openbsd, Linux 2008-09-10 7.5 HIGH N/A
Buffer overflow in mopd (Maintenance Operations Protocol loader daemon) allows remote attackers to execute arbitrary commands via a long file name.
CVE-2000-0313 1 Openbsd 1 Openbsd 2008-09-10 4.6 MEDIUM N/A
Vulnerability in OpenBSD 2.6 allows a local user to change interface media configurations.
CVE-2000-0310 1 Openbsd 1 Openbsd 2008-09-10 5.0 MEDIUM N/A
IP fragment assembly in OpenBSD 2.4 allows a remote attacker to cause a denial of service by sending a large number of fragmented packets.
CVE-2000-0309 1 Openbsd 1 Openbsd 2008-09-10 2.1 LOW N/A
The i386 trace-trap handling in OpenBSD 2.4 with DDB enabled allows a local user to cause a denial of service.
CVE-1999-0727 1 Openbsd 1 Openbsd 2008-09-09 5.0 MEDIUM N/A
A kernel leak in the OpenBSD kernel allows IPsec packets to be sent unencrypted.
CVE-1999-0724 1 Openbsd 1 Openbsd 2008-09-09 4.6 MEDIUM N/A
Buffer overflow in OpenBSD procfs and fdescfs file systems via uio_offset in the readdir() function.
CVE-1999-0703 3 Bsdi, Freebsd, Openbsd 3 Bsd Os, Freebsd, Openbsd 2008-09-09 3.6 LOW N/A
OpenBSD, BSDI, and other Unix operating systems allow users to set chflags and fchflags on character and block devices.
CVE-1999-0485 1 Openbsd 1 Openbsd 2008-09-09 2.6 LOW N/A
Remote attackers can cause a system crash through ipintr() in ipq in OpenBSD.
CVE-1999-0484 1 Openbsd 1 Openbsd 2008-09-09 2.1 LOW N/A
Buffer overflow in OpenBSD ping.
CVE-1999-0483 1 Openbsd 1 Openbsd 2008-09-09 2.1 LOW N/A
OpenBSD crash using nlink value in FFS and EXT2FS filesystems.
CVE-1999-0482 1 Openbsd 1 Openbsd 2008-09-09 5.0 MEDIUM N/A
OpenBSD kernel crash through TSS handling, as caused by the crashme program.
CVE-1999-0481 1 Openbsd 1 Openbsd 2008-09-09 5.0 MEDIUM N/A
Denial of service in "poll" in OpenBSD.
CVE-1999-0323 4 Bsdi, Freebsd, Netbsd and 1 more 4 Bsd Os, Freebsd, Netbsd and 1 more 2008-09-09 10.0 HIGH N/A
FreeBSD mmap function allows users to modify append-only or immutable files.
CVE-1999-0062 1 Openbsd 1 Openbsd 2008-09-09 7.2 HIGH N/A
The chpass command in OpenBSD allows a local user to gain root access through file descriptor leakage.
CVE-2007-4305 5 Netbsd, Openbsd, Sysjail and 2 more 5 Netbsd, Openbsd, Sysjail and 2 more 2008-09-05 6.2 MEDIUM N/A
Multiple race conditions in the (1) Sudo monitor mode and (2) Sysjail policies in Systrace on NetBSD and OpenBSD allow local users to defeat system call interposition, and consequently bypass access control policy and auditing.