4.4 * * * : Security Vulnerabilities

Cpe Name:cpe:2.3:o:freebsd:freebsd:4.4:*:*:*:*:*:*:*

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : CVE Number Descending CVE Number Ascending CVSS Score Descending Number Of Exploits Descending

#	CVE ID	CWE ID	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2018-6923	400	DoS	2018-09-04	2018-11-13	7.8	None	Remote	Low	Not required	None	None	Complete
In FreeBSD before 11.1-STABLE, 11.2-RELEASE-p2, 11.1-RELEASE-p13, ip fragment reassembly code is vulnerable to a denial of service due to excessive system resource consumption. This issue can allow a remote attacker who is able to send an arbitrary ip fragments to cause the machine to consume excessive resources.
2	CVE-2013-6834	20	+Info	2013-11-21	2014-03-04	4.9	None	Local	Low	Not required	Complete	None	None
The ql_eioctl function in sys/dev/qlxgbe/ql_ioctl.c in the kernel in FreeBSD 10 and earlier does not validate a certain size parameter, which allows local users to obtain sensitive information from kernel memory via a crafted ioctl call.
3	CVE-2013-6833	20	+Info	2013-11-21	2013-11-25	4.9	None	Local	Low	Not required	Complete	None	None
The qls_eioctl function in sys/dev/qlxge/qls_ioctl.c in the kernel in FreeBSD 10 and earlier does not validate a certain size parameter, which allows local users to obtain sensitive information from kernel memory via a crafted ioctl call.
4	CVE-2013-6832	200	+Info	2013-11-21	2013-11-25	4.9	None	Local	Low	Not required	Complete	None	None
The nand_ioctl function in sys/dev/nand/nand_geom.c in the nand driver in the kernel in FreeBSD 10 and earlier does not properly initialize a certain data structure, which allows local users to obtain sensitive information from kernel memory via a crafted ioctl call.
5	CVE-2012-2143	310		2012-07-05	2016-12-08	4.3	None	Remote	Medium	Not required	None	Partial	None
The crypt_des (aka DES-based crypt) function in FreeBSD before 9.0-RELEASE-p2, as used in PHP, PostgreSQL, and other products, does not process the complete cleartext password if this password contains a 0x80 character, which makes it easier for context-dependent attackers to obtain access via an authentication attempt with an initial substring of the intended password, as demonstrated by a Unicode password.
6	CVE-2008-4609	16	DoS	2008-10-20	2021-07-07	7.1	None	Remote	Medium	Not required	None	None	Complete
The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other operating systems allows remote attackers to cause a denial of service (connection queue exhaustion) via multiple vectors that manipulate information in the TCP state table, as demonstrated by sockstress.
7	CVE-2006-1283		+Priv	2006-03-23	2017-07-20	7.2	None	Local	Low	Not required	Complete	Complete	Complete
opiepasswd in One-Time Passwords in Everything (OPIE) in FreeBSD 4.10-RELEASE-p22 through 6.1-STABLE before 20060322 uses the getlogin function to determine the invoking user account, which might allow local users to configure OPIE access to the root account and possibly gain root privileges if a root shell is permitted by the configuration of the wheel group or sshd.
8	CVE-2005-2068			2005-07-05	2008-09-05	5.0	None	Remote	Low	Not required	None	Partial	None
FreeBSD 4.x through 4.11 and 5.x through 5.4 allows remote attackers to modify certain TCP options via a TCP packet with the SYN flag set for an already established session.
9	CVE-2005-1406			2005-05-06	2011-03-08	4.6	None	Local	Low	Not required	Partial	Partial	Partial
The kernel in FreeBSD 4.x to 4.11 and 5.x to 5.4 does not properly clear certain fixed-length buffers when copying variable-length data for use by applications, which could allow those applications to read previously used sensitive memory.
10	CVE-2005-1126	399		2005-04-15	2017-07-11	2.1	None	Local	Low	Not required	Partial	None	None
The SIOCGIFCONF ioctl (ifconf function) in FreeBSD 4.x through 4.11 and 5.x through 5.4 does not properly clear a buffer before using it, which allows local users to obtain portions of sensitive kernel memory.
11	CVE-2005-0988			2005-05-02	2017-10-11	3.7	None	Local	High	Not required	Partial	Partial	Partial
Race condition in gzip 1.2.4, 1.3.3, and earlier, when decompressing a gzipped file, allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by gzip after the decompression is complete.
12	CVE-2005-0708		+Info	2005-05-02	2017-10-12	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
The sendfile system call in FreeBSD 4.8 through 4.11 and 5 through 5.4 can transfer portions of kernel memory if a file is truncated while it is being sent, which could allow remote attackers to obtain sensitive information.
13	CVE-2005-0610		Exec Code	2005-04-12	2008-09-05	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Multiple symlink vulnerabilities in portupgrade before 20041226_2 in FreeBSD allow local users to (1) overwrite arbitrary files and possibly replace packages to execute arbitrary code via pkg_fetch, (2) overwrite arbitrary files via temporary files when portupgrade upgrades a port or package, or (3) create arbitrary zero-byte files via the pkgdb.fixme temporary file.
14	CVE-2005-0109		+Info	2005-03-05	2018-10-16	4.7	None	Local	Medium	Not required	Complete	None	None
Hyper-Threading technology, as used in FreeBSD and other operating systems that are run on Intel Pentium and other processors, allows local users to use a malicious thread to create covert channels, monitor the execution of other threads, and obtain sensitive information such as cryptographic keys, via a timing attack on memory cache misses.
15	CVE-2004-1471		DoS Exec Code	2004-12-31	2017-07-11	7.1	None	Remote	High	???	Complete	Complete	Complete
Format string vulnerability in wrapper.c in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16 allows remote attackers with CVSROOT commit access to cause a denial of service (application crash) and possibly execute arbitrary code via format string specifiers in a wrapper line.
16	CVE-2004-1066		DoS	2005-01-10	2017-07-11	3.6	None	Local	Low	Not required	Partial	None	Partial
The cmdline pseudofiles in (1) procfs on FreeBSD 4.8 through 5.3, and (2) linprocfs on FreeBSD 5.x through 5.3, do not properly validate a process argument vector, which allows local users to cause a denial of service (panic) or read portions of kernel memory. NOTE: this candidate might be SPLIT into 2 separate items in the future.
17	CVE-2004-0125			2004-08-06	2017-07-11	7.2	None	Local	Low	Not required	Complete	Complete	Complete
The jail system call in FreeBSD 4.x before 4.10-RELEASE does not verify that an attempt to manipulate routing tables originated from a non-jailed process, which could allow local users to modify the routing table.
18	CVE-2004-0002		DoS	2004-03-03	2008-09-10	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
The TCP MSS (maximum segment size) functionality in netinet allows remote attackers to cause a denial of service (resource exhaustion) via (1) a low MTU, which causes a large number of small packets to be produced, or (2) via a large number of packets with a small TCP payload, which cause a large number of calls to the resource-intensive sowakeup function.
19	CVE-2003-1234		DoS Exec Code Overflow	2003-12-31	2018-10-19	3.6	None	Local	Low	Not required	None	Partial	Partial
Integer overflow in the f_count counter in FreeBSD before 4.2 through 5.0 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via multiple calls to (1) fpathconf and (2) lseek, which do not properly decrement f_count through a call to fdrop.
20	CVE-2003-0914			2003-12-15	2018-10-30	4.3	None	Remote	Medium	Not required	None	Partial	None
ISC BIND 8.3.x before 8.3.7, and 8.4.x before 8.4.3, allows remote attackers to poison the cache via a malicious name server that returns negative responses with a large TTL (time-to-live) value.
21	CVE-2003-0804		DoS	2003-11-17	2008-09-10	5.0	None	Remote	Low	Not required	None	None	Partial
The arplookup function in FreeBSD 5.1 and earlier, Mac OS X before 10.2.8, and possibly other BSD-based systems, allows remote attackers on a local subnet to cause a denial of service (resource starvation and panic) via a flood of spoofed ARP requests.
22	CVE-2003-0466		Exec Code Overflow	2003-08-27	2018-05-03	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Off-by-one error in the fb_realpath() function, as derived from the realpath function in BSD, may allow attackers to execute arbitrary code, as demonstrated in wu-ftpd 2.5.0 through 2.6.2 via commands that cause pathnames of length MAXPATHLEN+1 to trigger a buffer overflow, including (1) STOR, (2) RETR, (3) APPE, (4) DELE, (5) MKD, (6) RMD, (7) STOU, or (8) RNTO.
23	CVE-2003-0078		+Info	2003-03-03	2016-10-18	5.0	None	Remote	Low	Not required	Partial	None	None
ssl3_get_record in s3_pkt.c for OpenSSL before 0.9.7a and 0.9.6 before 0.9.6i does not perform a MAC computation if an incorrect block cipher padding is used, which causes an information leak (timing discrepancy) that may make it easier to launch cryptographic attacks that rely on distinguishing between padding and MAC verification errors, possibly leading to extraction of the original plaintext, aka the "Vaudenay timing attack."
24	CVE-2003-0028		Exec Code Overflow	2003-03-25	2020-01-21	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived from SunRPC, including libnsl, libc, glibc, and dietlibc, allows remote attackers to execute arbitrary code via certain integer values in length fields, a different vulnerability than CVE-2002-0391.
25	CVE-2003-0015	415	DoS Exec Code Bypass	2003-02-07	2018-05-03	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Double-free vulnerability in CVS 1.11.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed Directory request, as demonstrated by bypassing write checks to execute Update-prog and Checkin-prog commands.
26	CVE-2003-0001	200	+Info	2003-01-17	2019-04-30	5.0	None	Remote	Low	Not required	Partial	None	None
Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows remote attackers to obtain information from previous packets or kernel memory by using malformed packets, as demonstrated by Etherleak.
27	CVE-2002-2092		+Priv	2002-12-31	2017-12-19	3.7	None	Local	High	Not required	Partial	Partial	Partial
Race condition in exec in OpenBSD 4.0 and earlier, NetBSD 1.5.2 and earlier, and FreeBSD 4.4 and earlier allows local users to gain privileges by attaching a debugger to a process before the kernel has determined that the process is setuid or setgid.
28	CVE-2002-1915		DoS	2002-12-31	2008-09-05	2.1	None	Local	Low	Not required	None	None	Partial
tip on multiple BSD-based operating systems allows local users to cause a denial of service (execution prevention) by using flock() to lock the /var/log/acculog file.
29	CVE-2002-1674		DoS	2002-12-31	2017-07-11	1.2	None	Local	High	Not required	None	None	Partial
procfs on FreeBSD before 4.5 allows local users to cause a denial of service (kernel panic) by removing a file that the fstatfs function refers to.
30	CVE-2002-1669			2002-12-31	2017-07-11	2.1	None	Local	Low	Not required	None	Partial	None
pkg_add in FreeBSD 4.2 through 4.4 creates a temporary directory with world-searchable permissions, which may allow local users to modify world-writable parts of the package during installation.
31	CVE-2002-1221		DoS	2002-11-29	2018-05-03	5.0	None	Remote	Low	Not required	None	None	Partial
BIND 8.x through 8.3.3 allows remote attackers to cause a denial of service (crash) via SIG RR elements with invalid expiry times, which are removed from the internal BIND database and later cause a null dereference.
32	CVE-2002-1220		DoS	2002-11-29	2018-05-03	5.0	None	Remote	Low	Not required	None	None	Partial
BIND 8.3.x through 8.3.3 allows remote attackers to cause a denial of service (termination due to assertion failure) via a request for a subdomain that does not exist, with an OPT resource record with a large UDP payload size.
33	CVE-2002-1219		Exec Code Overflow	2002-11-29	2018-05-03	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Buffer overflow in named in BIND 4 versions 4.9.10 and earlier, and 8 versions 8.3.3 and earlier, allows remote attackers to execute arbitrary code via a certain DNS server response containing SIG resource records (RR).
34	CVE-2002-1125			2002-09-24	2016-10-18	2.1	None	Local	Low	Not required	Partial	None	None
FreeBSD port programs that use libkvm for FreeBSD 4.6.2-RELEASE and earlier, including (1) asmon, (2) ascpu, (3) bubblemon, (4) wmmon, and (5) wmnet2, leave open file descriptors for /dev/mem and /dev/kmem, which allows local users to read kernel memory.
35	CVE-2002-0973			2002-09-24	2016-10-18	4.6	None	Local	Low	Not required	Partial	Partial	Partial
Integer signedness error in several system calls for FreeBSD 4.6.1 RELEASE-p10 and earlier may allow attackers to access sensitive kernel memory via large negative values to the (1) accept, (2) getsockname, and (3) getpeername system calls, and the (4) vesa FBIO_GETPALETTE ioctl.
36	CVE-2002-0754		+Priv	2002-08-12	2008-09-05	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Kerberos 5 su (k5su) in FreeBSD 4.4 and earlier relies on the getlogin system call to determine if the user running k5su is root, which could allow a root-initiated process to regain its privileges after it has dropped them.
37	CVE-2002-0414			2002-08-12	2008-09-05	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
KAME-derived implementations of IPsec on NetBSD 1.5.2, FreeBSD 4.5, and other operating systems, does not properly consult the Security Policy Database (SPD), which could cause a Security Gateway (SG) that does not use Encapsulating Security Payload (ESP) to forward forged IPv4 packets.
38	CVE-2002-0004		Exec Code Mem. Corr.	2002-02-27	2017-10-10	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Heap corruption vulnerability in the "at" program allows local users to execute arbitrary code via a malformed execution time, which causes at to free the same memory twice.
39	CVE-2001-1185		+Priv	2001-12-10	2008-09-05	6.2	None	Local	High	Not required	Complete	Complete	Complete
Some AIO operations in FreeBSD 4.4 may be delayed until after a call to execve, which could allow a local user to overwrite memory of the new process and gain privileges.
40	CVE-2001-1034		Exec Code	2001-09-23	2017-12-19	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Format string vulnerability in Hylafax on FreeBSD allows local users to execute arbitrary code via format specifiers in the -h hostname argument for (1) faxrm or (2) faxalter.

Total number of vulnerabilities : 40 Page : 1 (This Page)