Vulnerabilities > Openbsd

DATE CVE VULNERABILITY TITLE RISK
2004-08-06 CVE-2004-0414 CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle malformed "Entry" lines, which prevents a NULL terminator from being used and may lead to a denial of service (crash), modification of critical program data, or arbitrary code execution.
network
low complexity
cvs openpkg sgi gentoo openbsd
critical
10.0
2004-05-04 CVE-2004-0220 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Openbsd
isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service via an ISAKMP packet with a malformed Cert Request payload, which causes an integer underflow that is used in a malloc operation that is not properly handled, as demonstrated by the Striker ISAKMP Protocol Test Suite.
network
low complexity
openbsd CWE-119
critical
10.0
2004-05-04 CVE-2004-0219 Unspecified vulnerability in Openbsd
isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service (crash) via an ISAKMP packet with a malformed IPSEC SA payload, as demonstrated by the Striker ISAKMP Protocol Test Suite.
network
low complexity
openbsd
5.0
2004-05-04 CVE-2004-0218 Denial Of Service vulnerability in OpenBSD ISAKMPD Zero Payload Length
isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service (infinite loop) via an ISAKMP packet with a zero-length payload, as demonstrated by the Striker ISAKMP Protocol Test Suite.
network
low complexity
openbsd
5.0
2004-03-15 CVE-2004-0171 Remote Denial Of Service vulnerability in BSD Out Of Sequence Packets
FreeBSD 5.1 and earlier, and Mac OS X before 10.3.4, allows remote attackers to cause a denial of service (resource exhaustion of memory buffers and system crash) via a large number of out-of-sequence TCP packets, which prevents the operating system from creating new connections.
network
low complexity
freebsd openbsd
5.0
2004-03-03 CVE-2004-0114 Privilege Escalation vulnerability in BSD Kernel SHMAT System Call
The shmat system call in the System V Shared Memory interface for FreeBSD 5.2 and earlier, NetBSD 1.3 and earlier, and OpenBSD 2.6 and earlier, does not properly decrement a shared memory segment's reference count when the vm_map_find function fails, which could allow local users to gain read or write access to a portion of kernel memory and gain privileges.
local
low complexity
freebsd netbsd openbsd
4.6
2004-03-03 CVE-2004-0106 Multiple unknown vulnerabilities in XFree86 4.1.0 to 4.3.0, related to improper handling of font files, a different set of vulnerabilities than CVE-2004-0083 and CVE-2004-0084.
local
low complexity
xfree86-project openbsd
7.2
2004-03-03 CVE-2004-0084 Buffer Overflow vulnerability in XFree86 CopyISOLatin1Lowered Font_Name
Buffer overflow in the ReadFontAlias function in XFree86 4.1.0 to 4.3.0, when using the CopyISOLatin1Lowered function, allows local or remote authenticated users to execute arbitrary code via a malformed entry in the font alias (font.alias) file, a different vulnerability than CVE-2004-0083 and CVE-2004-0106.
network
low complexity
xfree86-project openbsd
critical
10.0
2004-03-03 CVE-2004-0083 Buffer Overflow vulnerability in XFree86 Font Information File
Buffer overflow in ReadFontAlias from dirfile.c of XFree86 4.1.0 through 4.3.0 allows local users and remote attackers to execute arbitrary code via a font alias file (font.alias) with a long token, a different vulnerability than CVE-2004-0084 and CVE-2004-0106.
network
low complexity
xfree86-project openbsd
critical
10.0
2004-02-03 CVE-2004-1082 mod_digest_apple for Apache 1.3.31 and 1.3.32 on Mac OS X Server does not properly verify the nonce of a client response, which allows remote attackers to replay credentials.
network
low complexity
apache apple avaya hp ibm openbsd sco sun
7.5