Vulnerabilities > Freebsd

DATE CVE VULNERABILITY TITLE RISK
1998-06-16 CVE-1999-0783 Link Following vulnerability in Freebsd 2.2
FreeBSD allows local users to conduct a denial of service by creating a hard link from a device special file to a file on an NFS file system.
local
low complexity
freebsd CWE-59
5.5
1998-05-01 CVE-1999-0796 Unspecified vulnerability in Freebsd 2.1.0/2.2
FreeBSD T/TCP Extensions for Transactions can be subjected to spoofing attacks.
network
low complexity
freebsd
7.5
1998-02-20 CVE-1999-0323 FreeBSD mmap function allows users to modify append-only or immutable files.
network
low complexity
bsdi freebsd netbsd openbsd
critical
10.0
1998-02-01 CVE-1999-0305 The system configuration control (sysctl) facility in BSD based operating systems OpenBSD 2.2 and earlier, and FreeBSD 2.2.5 and earlier, does not properly restrict source routed packets even when the (1) dosourceroute or (2) forwarding variables are set, which allows remote attackers to spoof TCP connections.
network
low complexity
bsdi freebsd openbsd
5.0
1998-02-01 CVE-1999-0304 mmap function in BSD allows local attackers in the kmem group to modify memory through devices.
local
low complexity
netbsd openbsd bsdi freebsd
7.2
1998-01-05 CVE-1999-0513 ICMP messages to broadcast addresses are allowed, allowing for a Smurf attack that can cause a denial of service.
network
low complexity
sun digital ibm freebsd linux hp netbsd
5.0
1997-12-10 CVE-1999-0017 FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce. 7.5
1997-10-29 CVE-1999-0322 Unspecified vulnerability in Freebsd 2.1.0/2.2
The open() function in FreeBSD allows local attackers to write to arbitrary files.
local
low complexity
freebsd
2.1
1997-10-02 CVE-1999-0061 File creation and deletion, and remote execution, in the BSD line printer daemon (lpd).
network
high complexity
openbsd freebsd linux bsdi
5.1
1997-09-15 CVE-1999-1214 Credentials Management vulnerability in multiple products
The asynchronous I/O facility in 4.4 BSD kernel does not check user credentials when setting the recipient of I/O notification, which allows local users to cause a denial of service by using certain ioctl and fcntl calls to cause the signal to be sent to an arbitrary process ID.
local
low complexity
sgi bsd freebsd netbsd openbsd CWE-255
2.1