Bsdi: Security Vulnerabilities
The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other operating systems allows remote attackers to cause a denial of service (connection queue exhaustion) via multiple vectors that manipulate information in the TCP state table, as demonstrated by sockstress.
CVSS Score
7.1
EPSS Score
0.005
Published
2008-10-20
Buffer overflow in Unix-to-Unix Copy Protocol (UUCP) in BSDI BSD/OS 3.0 through 4.2 allows local users to execute arbitrary code via a long command line argument.
CVSS Score
7.2
EPSS Score
0.003
Published
2001-12-31
Cyrus 2.0.15, 2.0.16, and 1.6.24 on BSDi 4.2, with IMAP enabled, allows remote attackers to cause a denial of service (hang) using PHP IMAP clients.
CVSS Score
5.0
EPSS Score
0.007
Published
2001-08-30
Vulnerability in a system call in BSDI 3.0 and 3.1 allows local users to cause a denial of service (reboot) in the kernel via a particular sequence of instructions.
CVSS Score
2.1
EPSS Score
0.004
Published
2001-08-21
rcvtty in BSD 3.0 and 4.0 does not properly drop privileges before executing a script, which allows local attackers to gain privileges by specifying an alternate Trojan horse script on the command line.
CVSS Score
7.2
EPSS Score
0.003
Published
2001-01-09
ip_input.c in BSD-derived TCP/IP implementations allows remote attackers to cause a denial of service (crash or hang) via crafted packets.
CVSS Score
5.0
EPSS Score
0.014
Published
1999-12-30
When BSDI patches for Gauntlet 5.0 BSDI are installed in a particular order, Gauntlet allows remote attackers to bypass firewall access restrictions, and does not log the activities.
CVSS Score
7.5
EPSS Score
0.004
Published
1999-10-18
Buffer overflow in WU-FTPD and related FTP servers allows remote attackers to gain root privileges via macro variables in a message file.
CVSS Score
10.0
EPSS Score
0.031
Published
1999-10-01
Denial of service in WU-FTPD via the SITE NEWER command, which does not free memory properly.
CVSS Score
5.0
EPSS Score
0.005
Published
1999-10-01
Buffer overflow in Berkeley automounter daemon (amd) logging facility provided in the Linux am-utils package and others.
CVSS Score
9.3
EPSS Score
0.042
Published
1999-09-16
Page 1