Openbsd: Security Vulnerabilities
The i386 trace-trap handling in OpenBSD 2.4 with DDB enabled allows a local user to cause a denial of service.
CVSS Score
2.1
EPSS Score
0.003
Published
2001-03-12
IP fragment assembly in OpenBSD 2.4 allows a remote attacker to cause a denial of service by sending a large number of fragmented packets.
CVSS Score
5.0
EPSS Score
0.012
Published
2001-03-12
cron in OpenBSD 2.5 allows local users to gain root privileges via an argv[] that is not NULL terminated, which is passed to cron's fake popen function.
CVSS Score
7.2
EPSS Score
0.005
Published
2001-03-12
Vulnerability in OpenBSD 2.6 allows a local user to change interface media configurations.
CVSS Score
4.6
EPSS Score
0.003
Published
2001-03-12
CORE SDI SSH1 CRC-32 compensation attack detector allows remote attackers to execute arbitrary commands on an SSH server or client via an integer overflow.
CVSS Score
10.0
EPSS Score
0.324
Published
2001-03-12
One-byte buffer overflow in replydirname function in BSD-based ftpd allows remote attackers to gain root privileges.
CVSS Score
10.0
EPSS Score
0.179
Published
2001-02-12
OpenSSH SSH client before 2.3.0 does not properly disable X11 or agent forwarding, which could allow a malicious SSH server to gain access to the X11 display and sniff X11 events, or gain access to the ssh-agent.
CVSS Score
7.5
EPSS Score
0.018
Published
2001-01-09
The IPSEC implementation in OpenBSD 2.7 does not properly handle empty AH/ESP packets, which allows remote attackers to cause a denial of service.
CVSS Score
5.0
EPSS Score
0.016
Published
2000-12-19
OpenBSD 2.6 and earlier allows remote attackers to cause a denial of service by flooding the server with ARP requests.
CVSS Score
5.0
EPSS Score
0.03
Published
2000-12-19
Directory traversal vulnerability in scp in sshd 1.2.xx allows a remote malicious scp server to overwrite arbitrary files via a .. (dot dot) attack.
CVSS Score
5.0
EPSS Score
0.057
Published
2000-12-19