Freebsd: >> Freebsd >> 4.1.1 Security Vulnerabilities
procfs in FreeBSD and possibly other operating systems allows local users to bypass access control restrictions for a jail environment and gain additional privileges.
CVSS Score
7.2
EPSS Score
0.0
Published
2001-02-12
ppp utility in FreeBSD 4.1.1 and earlier does not properly restrict access as specified by the "nat deny_incoming" command, which allows remote attackers to connect to the target system.
CVSS Score
7.5
EPSS Score
0.007
Published
2001-01-09
telnetd in FreeBSD 4.2 and earlier, and possibly other operating systems, allows remote attackers to cause a denial of service by specifying an arbitrary large file in the TERMCAP environmental variable, which consumes resources as the server processes the file.
CVSS Score
5.0
EPSS Score
0.007
Published
2001-01-09
fingerd in FreeBSD 4.1.1 allows remote attackers to read arbitrary files by specifying the target file name instead of a regular user name.
CVSS Score
5.0
EPSS Score
0.009
Published
2000-12-19
FreeBSD 4.1.1 and earlier, and possibly other BSD-based OSes, uses an insufficient random number generator to generate initial TCP sequence numbers (ISN), which allows remote attackers to spoof TCP connections.
CVSS Score
7.5
EPSS Score
0.083
Published
2000-12-19
Buffer overflow in ncurses library allows local users to execute arbitrary commands via long environmental information such as TERM or TERMINFO_DIRS.
CVSS Score
7.2
EPSS Score
0.002
Published
2000-12-19
Format string vulnerability in top program allows local attackers to gain root privileges via the "kill" or "renice" function.
CVSS Score
7.2
EPSS Score
0.003
Published
2000-12-11
Buffer overflow in catopen() function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to gain root privileges via a long environmental variable.
CVSS Score
7.2
EPSS Score
0.001
Published
2000-12-11
The catopen function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to read arbitrary files via the LANG environmental variable.
CVSS Score
7.2
EPSS Score
0.0
Published
2000-12-11
The setlocale function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to read arbitrary files via the LANG environmental variable.
CVSS Score
7.2
EPSS Score
0.0
Published
2000-12-11