Vulnerabilities > Openbsd > High

DATE CVE VULNERABILITY TITLE RISK
2001-01-09 CVE-2000-1169 Unspecified vulnerability in Openbsd Openssh 2.2
OpenSSH SSH client before 2.3.0 does not properly disable X11 or agent forwarding, which could allow a malicious SSH server to gain access to the X11 display and sniff X11 events, or gain access to the ssh-agent.
network
low complexity
openbsd
7.5
2000-12-19 CVE-2000-0997 Format string vulnerabilities in eeprom program in OpenBSD, NetBSD, and possibly other operating systems allows local attackers to gain root privileges.
local
low complexity
netbsd openbsd
7.2
2000-12-19 CVE-2000-0996 Unspecified vulnerability in Openbsd
Format string vulnerability in OpenBSD su program (and possibly other BSD-based operating systems) allows local attackers to gain root privileges via a malformed shell.
local
low complexity
openbsd
7.2
2000-12-19 CVE-2000-0995 Unspecified vulnerability in Openbsd
Format string vulnerability in OpenBSD yp_passwd program (and possibly other BSD-based operating systems) allows attackers to gain root privileges a malformed name.
local
low complexity
openbsd
7.2
2000-12-19 CVE-2000-0994 Unspecified vulnerability in Openbsd
Format string vulnerability in OpenBSD fstat program (and possibly other BSD-based operating systems) allows local users to gain root privileges via the PWD environmental variable.
local
low complexity
openbsd
7.2
2000-12-19 CVE-2000-0993 Format string vulnerability in pw_error function in BSD libutil library allows local users to gain root privileges via a malformed password in commands such as chpass or passwd.
local
low complexity
freebsd netbsd openbsd
7.2
2000-10-20 CVE-2000-0751 mopd (Maintenance Operations Protocol loader daemon) does not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary commands.
network
low complexity
netbsd openbsd redhat
7.5
2000-10-20 CVE-2000-0750 Buffer overflow in mopd (Maintenance Operations Protocol loader daemon) allows remote attackers to execute arbitrary commands via a long file name.
network
low complexity
netbsd openbsd redhat
7.5
1999-08-09 CVE-1999-0674 The BSD profil system call allows a local user to modify the internal data space of a program via profiling and execve.
local
low complexity
netbsd openbsd sun
7.2
1998-08-03 CVE-1999-0062 Unspecified vulnerability in Openbsd 2.3
The chpass command in OpenBSD allows a local user to gain root access through file descriptor leakage.
local
low complexity
openbsd
7.2