Vulnerabilities > Openbsd > Openbsd > 3.3

DATE CVE VULNERABILITY TITLE RISK
2004-05-04 CVE-2004-0220 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Openbsd
isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service via an ISAKMP packet with a malformed Cert Request payload, which causes an integer underflow that is used in a malloc operation that is not properly handled, as demonstrated by the Striker ISAKMP Protocol Test Suite.
network
low complexity
openbsd CWE-119
critical
10.0
2004-05-04 CVE-2004-0219 Unspecified vulnerability in Openbsd
isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service (crash) via an ISAKMP packet with a malformed IPSEC SA payload, as demonstrated by the Striker ISAKMP Protocol Test Suite.
network
low complexity
openbsd
5.0
2004-05-04 CVE-2004-0218 Denial Of Service vulnerability in OpenBSD ISAKMPD Zero Payload Length
isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service (infinite loop) via an ISAKMP packet with a zero-length payload, as demonstrated by the Striker ISAKMP Protocol Test Suite.
network
low complexity
openbsd
5.0
2004-03-15 CVE-2004-0171 Remote Denial Of Service vulnerability in BSD Out Of Sequence Packets
FreeBSD 5.1 and earlier, and Mac OS X before 10.3.4, allows remote attackers to cause a denial of service (resource exhaustion of memory buffers and system crash) via a large number of out-of-sequence TCP packets, which prevents the operating system from creating new connections.
network
low complexity
freebsd openbsd
5.0
2004-03-03 CVE-2004-0106 Multiple unknown vulnerabilities in XFree86 4.1.0 to 4.3.0, related to improper handling of font files, a different set of vulnerabilities than CVE-2004-0083 and CVE-2004-0084.
local
low complexity
xfree86-project openbsd
7.2
2004-03-03 CVE-2004-0084 Buffer Overflow vulnerability in XFree86 CopyISOLatin1Lowered Font_Name
Buffer overflow in the ReadFontAlias function in XFree86 4.1.0 to 4.3.0, when using the CopyISOLatin1Lowered function, allows local or remote authenticated users to execute arbitrary code via a malformed entry in the font alias (font.alias) file, a different vulnerability than CVE-2004-0083 and CVE-2004-0106.
network
low complexity
xfree86-project openbsd
critical
10.0
2004-03-03 CVE-2004-0083 Buffer Overflow vulnerability in XFree86 Font Information File
Buffer overflow in ReadFontAlias from dirfile.c of XFree86 4.1.0 through 4.3.0 allows local users and remote attackers to execute arbitrary code via a font alias file (font.alias) with a long token, a different vulnerability than CVE-2004-0084 and CVE-2004-0106.
network
low complexity
xfree86-project openbsd
critical
10.0
2003-12-15 CVE-2003-0955 Local Malformed Binary Execution Denial of Service vulnerability in Openbsd 3.3/3.4
OpenBSD kernel 3.3 and 3.4 allows local users to cause a denial of service (kernel panic) and possibly execute arbitrary code in 3.4 via a program with an invalid header that is not properly handled by (1) ibcs2_exec.c in the iBCS2 emulation (compat_ibcs2) or (2) exec_elf.c, which leads to a stack-based buffer overflow.
local
low complexity
openbsd
4.6
2003-11-17 CVE-2003-0804 The arplookup function in FreeBSD 5.1 and earlier, Mac OS X before 10.2.8, and possibly other BSD-based systems, allows remote attackers on a local subnet to cause a denial of service (resource starvation and panic) via a flood of spoofed ARP requests.
network
low complexity
apple freebsd openbsd
5.0
2003-10-06 CVE-2003-0681 Buffer Overflow vulnerability in Sendmail Ruleset Parsing
A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets (1) recipient (2), final, or (3) mailer-specific envelope recipients, has unknown consequences.
network
low complexity
sendmail apple gentoo hp ibm netbsd openbsd turbolinux
7.5