Vulnerabilities > Netbsd > Netbsd > 3.0

DATE CVE VULNERABILITY TITLE RISK
2006-04-03 CVE-2006-1589 Denial-Of-Service vulnerability in NetBSD
The elf_load_file function in NetBSD 2.0 through 3.0 allows local users to cause a denial of service (kernel crash) via an ELF interpreter that does not have a PT_LOAD section in its header, which triggers a null dereference.
local
low complexity
netbsd
4.9
2006-04-03 CVE-2006-1588 Unspecified vulnerability in Netbsd
The bridge ioctl (if_bridge code) in NetBSD 1.6 through 3.0 does not clear sensitive memory before copying ioctl results to the requesting process, which allows local users to obtain portions of kernel memory.
local
low complexity
netbsd
2.1
2006-04-03 CVE-2006-1587 Local Security vulnerability in NetBSD
NetBSD 1.6 up to 3.0, when a user has "set record" in .mailrc with the default umask set, creates the record file with 0644 permissions, which allows local users to read the record file.
local
low complexity
netbsd
2.1
2006-03-23 CVE-2006-0905 A "programming error" in fast_ipsec in FreeBSD 4.8-RELEASE through 6.1-STABLE and NetBSD 2 through 3 does not properly update the sequence number associated with a Security Association, which allows packets to pass sequence number checks and allows remote attackers to capture IPSec packets and conduct replay attacks.
network
low complexity
freebsd netbsd
7.5