Bsdi Bsd Os — known CVE vulnerabilities

Every CVE whose affected-product data names Bsdi Bsd Os, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (38)

• CVE-1999-0323 — CVSS 10.0 (critical): FreeBSD mmap function allows users to modify append-only or immutable files.
• CVE-1999-0879 — CVSS 10.0 (critical): Buffer overflow in WU-FTPD and related FTP servers allows remote attackers to gain root privileges via macro variables in a message file.
• CVE-1999-0798 — CVSS 10.0 (critical): Buffer overflow in bootpd on OpenBSD, FreeBSD, and Linux systems via a malformed header type.
• CVE-1999-0002 — CVSS 10.0 (critical): Buffer overflow in NFS mountd gives root access to remote attackers, mostly in Linux systems.
• CVE-1999-0042 — CVSS 10.0 (critical): Buffer overflow in University of Washington's implementation of IMAP and POP servers.
• CVE-1999-0046 — CVSS 10.0 (critical): Buffer overflow of rlogin program using TERM environmental variable.
• CVE-1999-0047 — CVSS 10.0 (critical): MIME conversion buffer overflow in sendmail versions 8.8.3 and 8.8.4.
• CVE-1999-0009 — CVSS 10.0 (critical): Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases.
• CVE-1999-0099 — CVSS 10.0 (critical): Buffer overflow in syslog utility allows local or remote attackers to gain root privileges.
• CVE-1999-0165 — CVSS 10.0 (critical): NFS cache poisoning.
• CVE-1999-0043 — CVSS 9.8 (critical): Command execution via shell metachars in INN daemon (innd) 1.5 using "newgroup" and "rmgroup" control messages, and others.
• CVE-1999-0704 — CVSS 9.3 (critical): Buffer overflow in Berkeley automounter daemon (amd) logging facility provided in the Linux am-utils package and others.
• CVE-1999-0038 — CVSS 8.4 (high): Buffer overflow in xlock program allows local users to execute commands as root.
• CVE-1999-0022 — CVSS 7.8 (high): Local user gains root privileges via buffer overflow in rdist, via expstr() function.
• CVE-1999-0052 — CVSS 7.5 (high): IP fragmentation denial of service in FreeBSD allows a remote attacker to cause a crash.
• CVE-1999-0040 — CVSS 7.2 (high): Buffer overflow in Xt library of X Windowing System allows local users to execute commands with root privileges.
• CVE-2000-1103 — CVSS 7.2 (high): rcvtty in BSD 3.0 and 4.0 does not properly drop privileges before executing a script, which allows local attackers to gain privileges by…
• CVE-1999-0297 — CVSS 7.2 (high): Buffer overflow in Vixie Cron library up to version 3.0 allows local users to obtain root access via a long environmental variable.
• CVE-1999-0304 — CVSS 7.2 (high): mmap function in BSD allows local attackers in the kmem group to modify memory through devices.
• CVE-1999-0034 — CVSS 7.2 (high): Buffer overflow in suidperl (sperl), Perl 4.x and 5.x.
• CVE-1999-0131 — CVSS 7.2 (high): Buffer overflow and denial of service in Sendmail 8.7.5 and earlier through GECOS field gives root access to local users.
• CVE-2001-1541 — CVSS 7.2 (high): Buffer overflow in Unix-to-Unix Copy Protocol (UUCP) in BSDI BSD/OS 3.0 through 4.2 allows local users to execute arbitrary code via a long…
• CVE-1999-0023 — CVSS 7.2 (high): Local user gains root privileges via buffer overflow in rdist, via lookup() function.
• CVE-1999-0130 — CVSS 7.2 (high): Local users can start Sendmail in daemon mode and gain root privileges.
• CVE-1999-0032 — CVSS 7.2 (high): Buffer overflow in lpr, as used in BSD-based systems including Linux, allows local users to execute arbitrary code as root via a long -C…
• CVE-2008-4609 — CVSS 7.1 (high): The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other…
• CVE-1999-0061 — CVSS 5.1 (medium): File creation and deletion, and remote execution, in the BSD line printer daemon (lpd).
• CVE-1999-0001 — CVSS 5.0 (medium): ip_input.c in BSD-derived TCP/IP implementations allows remote attackers to cause a denial of service (crash or hang) via crafted packets.
• CVE-1999-0024 — CVSS 5.0 (medium): DNS cache poisoning via BIND, by predictable query IDs.
• CVE-1999-0096 — CVSS 5.0 (medium): Sendmail decode alias can be used to overwrite sensitive files.
• CVE-1999-0305 — CVSS 5.0 (medium): The system configuration control (sysctl) facility in BSD based operating systems OpenBSD 2.2 and earlier, and FreeBSD 2.2.5 and earlier…
• CVE-1999-0880 — CVSS 5.0 (medium): Denial of service in WU-FTPD via the SITE NEWER command, which does not free memory properly.
• CVE-2001-1154 — CVSS 5.0 (medium): Cyrus 2.0.15, 2.0.16, and 1.6.24 on BSDi 4.2, with IMAP enabled, allows remote attackers to cause a denial of service (hang) using PHP IMAP…
• CVE-1999-0129 — CVSS 4.6 (medium): Sendmail allows local users to write to a file and gain group permissions via a .forward or :include: file.
• CVE-1999-0703 — CVSS 3.6 (low): OpenBSD, BSDI, and other Unix operating systems allow users to set chflags and fchflags on character and block devices.
• CVE-2001-1133 — CVSS 2.1 (low): Vulnerability in a system call in BSDI 3.0 and 3.1 allows local users to cause a denial of service (reboot) in the kernel via a particular…
• CVE-1999-0747 — CVSS 2.1 (low): Denial of service in BSDi Symmetric Multiprocessing (SMP) when an fstat call is made when the system has a high CPU load.
• CVE-1999-0078 — CVSS 1.9 (low): pcnfsd (aka rpc.pcnfsd) allows local users to change file permissions, or execute arbitrary commands through arguments in the RPC call.