1.5.1 * * * : Security Vulnerabilities

Cpe Name:cpe:2.3:o:netbsd:netbsd:1.5.1:*:*:*:*:*:*:*

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : CVE Number Descending CVE Number Ascending CVSS Score Descending Number Of Exploits Descending

#	CVE ID	CWE ID	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2010-2530	189	DoS	2010-09-29	2010-09-30	4.9	None	Local	Low	Not required	None	None	Complete
Multiple integer signedness errors in smb_subr.c in the netsmb module in the kernel in NetBSD 5.0.2 and earlier, FreeBSD, and Apple Mac OS X allow local users to cause a denial of service (panic) via a negative size value in a /dev/nsmb ioctl operation, as demonstrated by a (1) SMBIOC_LOOKUP or (2) SMBIOC_OPENSESSION ioctl call.
2	CVE-2009-2793	264	+Priv	2009-09-18	2018-10-10	4.6	None	Local	Low	Not required	Partial	Partial	Partial
The kernel in NetBSD, probably 5.0.1 and earlier, on x86 platforms does not properly handle a pre-commit failure of the iret instruction, which might allow local users to gain privileges via vectors related to a tempEIP pseudocode variable that is outside of the code-segment limits.
3	CVE-2008-4609	16	DoS	2008-10-20	2021-07-07	7.1	None	Remote	Medium	Not required	None	None	Complete
The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other operating systems allows remote attackers to cause a denial of service (connection queue exhaustion) via multiple vectors that manipulate information in the TCP state table, as demonstrated by sockstress.
4	CVE-2006-5215			2006-10-10	2018-10-30	2.6	None	Local	High	Not required	Partial	Partial	None
The Xsession script, as used by X Display Manager (xdm) in NetBSD before 20060212, X.Org before 20060317, and Solaris 8 through 10 before 20061006, allows local users to overwrite arbitrary files, or read another user's Xsession errors file, via a symlink attack on a /tmp/xses-$USER file.
5	CVE-2004-1323		DoS	2004-12-16	2017-07-11	2.1	None	Local	Low	Not required	None	None	Partial
Multiple syscalls in the compat subsystem for NetBSD before 2.0 allow local users to cause a denial of service (kernel crash) via a large signal number to (1) xxx_sys_kill, (2) xxx_sys_sigaction, and possibly other translation functions.
6	CVE-2004-0230		DoS	2004-08-18	2018-10-19	5.0	None	Remote	Low	Not required	None	None	Partial
TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to persistent TCP connections by repeatedly injecting a TCP RST packet, especially in protocols that use long-lived connections, such as BGP.
7	CVE-2003-1289			2003-12-31	2017-07-20	2.1	None	Local	Low	Not required	Partial	None	None
The iBCS2 system call translator for statfs in NetBSD 1.5 through 1.5.3 and FreeBSD 4 up to 4.8-RELEASE-p2 and 5 up to 5.1-RELEASE-p1 allows local users to read portions of kernel memory (memory disclosure) via a large length parameter, which copies additional kernel memory into userland memory.
8	CVE-2003-0730		DoS Exec Code Overflow	2003-10-20	2016-10-18	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Multiple integer overflows in the font libraries for XFree86 4.3.0 allow local or remote attackers to cause a denial of service or execute arbitrary code via heap-based and stack-based buffer overflow attacks.
9	CVE-2003-0694		Exec Code Overflow	2003-10-06	2018-10-30	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c.
10	CVE-2003-0681		Overflow	2003-10-06	2018-05-03	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets (1) recipient (2), final, or (3) mailer-specific envelope recipients, has unknown consequences.
11	CVE-2003-0653		DoS	2003-08-27	2008-09-10	5.0	None	Remote	Low	Not required	None	None	Partial
The OSI networking kernel (sys/netiso) in NetBSD 1.6.1 and earlier does not use a BSD-required "PKTHDR" mbuf when sending certain error responses to the sender of an OSI packet, which allows remote attackers to cause a denial of service (kernel panic or crash) via certain OSI packets.
12	CVE-2003-0466		Exec Code Overflow	2003-08-27	2018-05-03	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Off-by-one error in the fb_realpath() function, as derived from the realpath function in BSD, may allow attackers to execute arbitrary code, as demonstrated in wu-ftpd 2.5.0 through 2.6.2 via commands that cause pathnames of length MAXPATHLEN+1 to trigger a buffer overflow, including (1) STOR, (2) RETR, (3) APPE, (4) DELE, (5) MKD, (6) RMD, (7) STOU, or (8) RNTO.
13	CVE-2003-0102		Exec Code Overflow	2003-03-18	2018-05-03	4.6	None	Local	Low	Not required	Partial	Partial	Partial
Buffer overflow in tryelf() in readelf.c of the file command allows attackers to execute arbitrary code as the user running file, possibly via a large entity size value in an ELF header (elfhdr.e_shentsize).
14	CVE-2003-0001	200	+Info	2003-01-17	2019-04-30	5.0	None	Remote	Low	Not required	Partial	None	None
Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows remote attackers to obtain information from previous packets or kernel memory by using malformed packets, as demonstrated by Etherleak.
15	CVE-2002-2092		+Priv	2002-12-31	2017-12-19	3.7	None	Local	High	Not required	Partial	Partial	Partial
Race condition in exec in OpenBSD 4.0 and earlier, NetBSD 1.5.2 and earlier, and FreeBSD 4.4 and earlier allows local users to gain privileges by attaching a debugger to a process before the kernel has determined that the process is setuid or setgid.
16	CVE-2002-1915		DoS	2002-12-31	2008-09-05	2.1	None	Local	Low	Not required	None	None	Partial
tip on multiple BSD-based operating systems allows local users to cause a denial of service (execution prevention) by using flock() to lock the /var/log/acculog file.
17	CVE-2002-1543		Overflow +Priv	2003-03-31	2008-09-05	4.6	None	Local	Low	Not required	Partial	Partial	Partial
Buffer overflow in trek on NetBSD 1.5 through 1.5.3 allows local users to gain privileges via long keyboard input.
18	CVE-2002-1500		Overflow +Priv	2003-04-02	2008-09-05	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Buffer overflow in (1) mrinfo, (2) mtrace, and (3) pppd in NetBSD 1.4.x through 1.6 allows local users to gain privileges by executing the programs after filling the file descriptor tables, which produces file descriptors larger than FD_SETSIZE, which are not checked by FD_SET().
19	CVE-2002-1490		DoS Overflow	2003-04-02	2008-09-05	2.1	None	Local	Low	Not required	None	None	Partial
NetBSD 1.4 through 1.6 beta allows local users to cause a denial of service (kernel panic) via a series of calls to the TIOCSCTTY ioctl, which causes an integer overflow in a structure counter and sets the counter to zero, which frees memory that is still in use by other processes.
20	CVE-2002-1476		Exec Code Overflow	2003-04-22	2008-09-05	4.6	None	Local	Low	Not required	Partial	Partial	Partial
Buffer overflow in setlocale in libc on NetBSD 1.4.x through 1.6, and possibly other operating systems, when called with the LC_ALL category, allows local attackers to execute arbitrary code via a user-controlled locale string that has more than 6 elements, which exceeds the boundaries of the new_categories category array, as exploitable through programs such as xterm and zsh.
21	CVE-2002-1337		Exec Code Overflow	2003-03-07	2018-10-30	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related to sender and recipient header comments as processed by the crackaddr function of headers.c.
22	CVE-2002-1194		Exec Code Overflow	2002-10-28	2008-09-10	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Buffer overflow in talkd on NetBSD 1.6 and earlier, and possibly other operating systems, may allow remote attackers to execute arbitrary code via a long inbound message.
23	CVE-2002-1192		Overflow +Priv	2002-10-28	2017-07-11	4.6	None	Local	Low	Not required	Partial	Partial	Partial
Multiple buffer overflows in rogue on NetBSD 1.6 and earlier, FreeBSD 4.6, and possibly other operating systems, allows local users to gain "games" group privileges via malformed entries in a game save file.
24	CVE-2002-1165		Bypass	2002-10-11	2016-10-18	4.6	None	Local	Low	Not required	Partial	Partial	Partial
Sendmail Consortium's Restricted Shell (SMRSH) in Sendmail 8.12.6, 8.11.6-15, and possibly other versions after 8.11 from 5/19/1998, allows attackers to bypass the intended restrictions of smrsh by inserting additional commands after (1) "\|\|" sequences or (2) "/" characters, which are not properly filtered or verified.
25	CVE-2002-0666		DoS	2002-11-04	2008-09-10	5.0	None	Remote	Low	Not required	None	None	Partial
IPSEC implementations including (1) FreeS/WAN and (2) KAME do not properly calculate the length of authentication data, which allows remote attackers to cause a denial of service (kernel panic) via spoofed, short Encapsulating Security Payload (ESP) packets, which result in integer signedness errors.
26	CVE-2002-0414			2002-08-12	2008-09-05	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
KAME-derived implementations of IPsec on NetBSD 1.5.2, FreeBSD 4.5, and other operating systems, does not properly consult the Security Policy Database (SPD), which could cause a Security Gateway (SG) that does not use Encapsulating Security Payload (ESP) to forward forged IPv4 packets.
27	CVE-2001-1244		DoS	2001-07-07	2018-10-30	5.0	None	Remote	Low	Not required	None	None	Partial
Multiple TCP implementations could allow remote attackers to cause a denial of service (bandwidth and CPU exhaustion) by setting the maximum segment size (MSS) to a very small number and requesting large amounts of data, which generates more packets with less TCP-level data that amplify network traffic and consume more server CPU to process.
28	CVE-2001-1145			2001-08-17	2008-09-10	6.2	None	Local	High	Not required	Complete	Complete	Complete
fts routines in FreeBSD 4.3 and earlier, NetBSD before 1.5.2, and OpenBSD 2.9 and earlier can be forced to change (chdir) into a different directory than intended when the directory above the current directory is moved, which could cause scripts to perform dangerous actions on the wrong directories.
29	CVE-2001-1091		+Priv	2001-08-23	2017-12-19	7.2	None	Local	Low	Not required	Complete	Complete	Complete
The (1) dump and (2) dump_lfs commands in NetBSD 1.4.x through 1.5.1 do not properly drop privileges, which could allow local users to gain privileges via the RCMD_CMD environment variable.
30	CVE-2001-0554	120	Exec Code Overflow	2001-08-14	2022-01-21	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a set of options including AYT (Are You There), which is not properly handled by the telrcv function.

Total number of vulnerabilities : 30 Page : 1 (This Page)