WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Product netbsd✕
Overview 168 matches · 0 in Waratek scope · 0 protected · 4 exploited · 0 CISA KEV · 46 public PoC · 11 EPSS ≥ 0.5
168matches 0in Waratek scope0.0% 0protected0.0% 4exploited2.4% 0CISA KEV0.0% 46public PoC27.4% 11EPSS ≥ 0.56.5%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 1 0.6% Not applicable 167 99.4% Withdrawn CVE 0 0.0%
Critical 5 3.0% High 64 38.1% Medium 65 38.7% Low 34 20.2% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 168 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 4 2.4% Working exploit published 41 24.4% Proof of concept only 2 1.2% Forecast only 0 0.0% No public exploit 121 72.0%
split by peak 25 / year
Not applicable: 167Outside Waratek scope: 1 Low: 34Medium: 65High: 64Critical: 5 not blocked: 168 No public exploit: 121Proof of concept only: 2Working exploit published: 41Exploited: 4
19962 Not applicable2 High2 not blocked2 No public exploit2 19978 Not applicable8 High2 Medium5 Low1 not blocked8 Working exploit published3 No public exploit5 19988 Not applicable8 High3 Medium4 Low1 not blocked8 Working exploit published3 No public exploit5 199912 Not applicable12 High3 Medium5 Low4 not blocked12 Working exploit published4 No public exploit8 200011 Not applicable11 High6 Medium2 Low3 not blocked11 Working exploit published4 No public exploit7 200114 Not applicable14 High8 Medium5 Low1 not blocked14 Exploited1 Working exploit published3 No public exploit10 200210 Not applicable10 High4 Medium5 Low1 not blocked10 Working exploit published3 No public exploit7 200313 Not applicable13 Critical1 High5 Medium6 Low1 not blocked13 Exploited2 Working exploit published4 No public exploit7 20046 Not applicable6 High2 Medium3 Low1 not blocked6 Working exploit published3 No public exploit3 20059 Not applicable9 High2 Medium2 Low5 not blocked9 No public exploit9 200625 Not applicable25 High5 Medium8 Low12 not blocked25 Working exploit published1 No public exploit24 20073 Not applicable3 High1 Medium1 Low1 not blocked3 No public exploit3 20088 Not applicable8 High7 Medium1 not blocked8 Working exploit published3 Proof of concept only1 No public exploit4 20095 Not applicable5 High1 Medium4 not blocked5 Working exploit published3 No public exploit2 20103 Not applicable3 Medium2 Low1 not blocked3 No public exploit3 20117 Not applicable7 High1 Medium5 Low1 not blocked7 Working exploit published3 No public exploit4 20124 Not applicable4 High2 Medium2 not blocked4 Working exploit published1 No public exploit3 20130 20146 Outside Waratek scope1 Not applicable5 High1 Medium4 Low1 not blocked6 Working exploit published1 Proof of concept only1 No public exploit4 20150 20160 20175 Not applicable5 Critical4 High1 not blocked5 Working exploit published2 No public exploit3 20180 20191 Not applicable1 High1 not blocked1 No public exploit1 20202 Not applicable2 High2 not blocked2 No public exploit2 20215 Not applicable5 High4 Medium1 not blocked5 No public exploit5 20220 20230 20241 Not applicable1 High1 not blocked1 Exploited1
1997200020032006200920122015201820212024
168 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 2 of 2 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2003-0102 Medium 2003-03-18 Not applicable Working exploit published Buffer overflow in tryelf() in readelf.c of the file command allows attackers to execute arbitrary code as the user running file, possibly via a large entity size value in an ELF header (elfhdr.e_shentsize).
CVE-2002-1337 High 2003-03-07 Not applicable Working exploit published Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related to sender and recipient header comments as processed by the crackaddr function of headers.c.
CVE-2003-0001 Medium 2003-01-17 Not applicable Working exploit published Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows remote attackers to obtain information from previous packets or kernel memory by using malformed packets, as demonstrated by Etherleak.
CVE-2002-2092 Low 2002-12-31 Not applicable No public exploit Race condition in exec in OpenBSD 4.0 and earlier, NetBSD 1.5.2 and earlier, and FreeBSD 4.4 and earlier allows local users to gain privileges by attaching a debugger to a process before the kernel has determined that the process is setuid or setgid.
CVE-2002-1915 Medium 2002-12-31 Not applicable No public exploit tip on multiple BSD-based operating systems allows local users to cause a denial of service (execution prevention) by using flock() to lock the /var/log/acculog file.
CVE-2002-0666 Medium 2002-11-04 Not applicable No public exploit IPSEC implementations including (1) FreeS/WAN and (2) KAME do not properly calculate the length of authentication data, which allows remote attackers to cause a denial of service (kernel panic) via spoofed, short Encapsulating Security Payload (ESP) packets, which result in integer signedness errors.
CVE-2002-1194 High 2002-10-28 Not applicable No public exploit Buffer overflow in talkd on NetBSD 1.6 and earlier, and possibly other operating systems, may allow remote attackers to execute arbitrary code via a long inbound message.
CVE-2002-1192 Medium 2002-10-28 Not applicable Working exploit published Multiple buffer overflows in rogue on NetBSD 1.6 and earlier, FreeBSD 4.6, and possibly other operating systems, allows local users to gain "games" group privileges via malformed entries in a game save file.
CVE-2002-1165 Medium 2002-10-11 Not applicable Working exploit published Sendmail Consortium's Restricted Shell (SMRSH) in Sendmail 8.12.6, 8.11.6-15, and possibly other versions after 8.11 from 5/19/1998, allows attackers to bypass the intended restrictions of smrsh by inserting additional commands after (1) "||" sequences or (2) "/" characters, which are not properly filtered or verified.
CVE-2002-0414 High 2002-08-12 Not applicable No public exploit KAME-derived implementations of IPsec on NetBSD 1.5.2, FreeBSD 4.5, and other operating systems, does not properly consult the Security Policy Database (SPD), which could cause a Security Gateway (SG) that does not use Encapsulating Security Payload (ESP) to forward forged IPv4 packets.
CVE-2000-1208 High 2002-08-12 Not applicable No public exploit Format string vulnerability in startprinting() function of printjob.c in BSD-based lpr lpd package may allow local users to gain privileges via an improper syslog call that uses format strings from the checkremote() call.
CVE-2002-0381 Medium 2002-06-25 Not applicable No public exploit The TCP implementation in various BSD operating systems (tcp_input.c) does not properly block connections to broadcast addresses, which could allow remote attackers to bypass intended filters via packets with a unicast link layer address and an IP broadcast address.
CVE-2002-0004 High 2002-02-27 Not applicable Working exploit published Heap corruption vulnerability in the "at" program allows local users to execute arbitrary code via a malformed execution time, which causes at to free the same memory twice.
CVE-2001-0734 High 2001-10-18 Not applicable No public exploit Hitachi Super-H architecture in NetBSD 1.5 and 1.4.1 allows a local user to gain privileges via modified Status Register contents, which are not properly handled by (1) the sigreturn system call or (2) the process_write_regs kernel routine.
CVE-2001-0670 High 2001-10-03 Not applicable No public exploit Buffer overflow in BSD line printer daemon (in.lpd or lpd) in various BSD-based operating systems allows remote attackers to execute arbitrary code via an incomplete print job followed by a request to display the printer queue.
CVE-2001-0710 Medium 2001-09-20 Not applicable No public exploit NetBSD 1.5 and earlier and FreeBSD 4.3 and earlier allows a remote attacker to cause a denial of service by sending a large number of IP fragments to the machine, exhausting the mbuf pool.
CVE-2001-1091 High 2001-08-23 Not applicable No public exploit The (1) dump and (2) dump_lfs commands in NetBSD 1.4.x through 1.5.1 do not properly drop privileges, which could allow local users to gain privileges via the RCMD_CMD environment variable.
CVE-2001-1145 Medium 2001-08-17 Not applicable No public exploit fts routines in FreeBSD 4.3 and earlier, NetBSD before 1.5.2, and OpenBSD 2.9 and earlier can be forced to change (chdir) into a different directory than intended when the directory above the current directory is moved, which could cause scripts to perform dangerous actions on the wrong directories.
CVE-2001-0554 High 2001-08-14 Not applicable Exploited Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a set of options including AYT (Are You There), which is not properly handled by the telrcv function.
CVE-2001-0993 Low 2001-07-24 Not applicable No public exploit sendmsg function in NetBSD 1.3 through 1.5 allows local users to cause a denial of service (kernel trap or panic) via a msghdr structure with a large msg_controllen length.
CVE-2001-1244 Medium 2001-07-07 Not applicable Working exploit published Multiple TCP implementations could allow remote attackers to cause a denial of service (bandwidth and CPU exhaustion) by setting the maximum segment size (MSS) to a very small number and requesting large amounts of data, which generates more packets with less TCP-level data that amplify network traffic and consume more server CPU to process.
CVE-2001-0247 High 2001-06-18 Not applicable Working exploit published Buffer overflows in BSD-based FTP servers allows remote attackers to execute arbitrary commands via a long pattern string containing a {} sequence, as seen in (1) g_opendir, (2) g_lstat, (3) g_stat, and (4) the glob0 buffer as used in the glob functions glob2 and glob3.
CVE-2001-0268 High 2001-05-03 Not applicable No public exploit The i386_set_ldt system call in NetBSD 1.5 and earlier, and OpenBSD 2.8 and earlier, when the USER_LDT kernel option is enabled, does not validate a call gate target, which allows local users to gain root privileges by creating a segment call gate in the Local Descriptor Table (LDT) with a target that specifies an arbitrary kernel address.
CVE-2000-0315 Medium 2001-03-12 Not applicable No public exploit traceroute in NetBSD 1.3.3 and Linux systems allows local unprivileged users to modify the source address of the packets, which could be used in spoofing attacks.
CVE-2000-0314 Medium 2001-03-12 Not applicable No public exploit traceroute in NetBSD 1.3.3 and Linux systems allows local users to flood other systems by providing traceroute with a large waittime (-w) option, which is not parsed properly and sets the time delay for sending packets to zero.
CVE-2001-0033 High 2001-02-16 Not applicable No public exploit KTH Kerberos IV allows local users to change the configuration of a Kerberos server running at an elevated privilege by specifying an alternate directory using with the KRBCONFDIR environmental variable, which allows the user to gain additional privileges.
CVE-2001-0053 High 2001-02-12 Not applicable Working exploit published One-byte buffer overflow in replydirname function in BSD-based ftpd allows remote attackers to gain root privileges.
CVE-2000-0997 High 2000-12-19 Not applicable No public exploit Format string vulnerabilities in eeprom program in OpenBSD, NetBSD, and possibly other operating systems allows local attackers to gain root privileges.
CVE-2000-0993 High 2000-12-19 Not applicable Working exploit published Format string vulnerability in pw_error function in BSD libutil library allows local users to gain root privileges via a malformed password in commands such as chpass or passwd.
CVE-2000-0751 High 2000-10-20 Not applicable Working exploit published mopd (Maintenance Operations Protocol loader daemon) does not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary commands.
CVE-2000-0750 High 2000-10-20 Not applicable No public exploit Buffer overflow in mopd (Maintenance Operations Protocol loader daemon) allows remote attackers to execute arbitrary commands via a long file name.
CVE-2000-0461 Low 2000-05-29 Not applicable No public exploit The undocumented semconfig system call in BSD freezes the state of semaphores, which allows local users to cause a denial of service of the semaphore system by using the semconfig call.
CVE-2000-0462 Low 2000-05-28 Not applicable No public exploit ftpd in NetBSD 1.4.2 does not properly parse entries in /etc/ftpchroot and does not chroot the specified users, which allows those users to access other files outside of their home directory.
CVE-2000-0456 Low 2000-05-28 Not applicable No public exploit NetBSD 1.4.2 and earlier allows local users to cause a denial of service by repeatedly running certain system calls in the kernel which do not yield the CPU, aka "cpu-hog".
CVE-2000-0440 Medium 2000-05-01 Not applicable Working exploit published NetBSD 1.4.2 and earlier allows remote attackers to cause a denial of service by sending a packet with an unaligned IP timestamp option.
CVE-2000-0094 High 2000-02-16 Not applicable Working exploit published procfs in BSD systems allows local users to gain root privileges by modifying the /proc/pid/mem interface via a modified file descriptor for stderr.
CVE-2000-0157 High 2000-02-01 Not applicable No public exploit NetBSD ptrace call on VAX allows local users to gain privileges by modifying the PSL contents in the debugging process.
CVE-2000-0092 Medium 2000-01-19 Not applicable No public exploit The BSD make program allows local users to modify files via a symlink attack when the -j option is being used.
CVE-2000-0489 Low 1999-09-05 Not applicable Working exploit published FreeBSD, NetBSD, and OpenBSD allow an attacker to cause a denial of service by creating a large number of socket pairs using the socketpair function, setting a large buffer size via setsockopt, then writing large buffers.
CVE-1999-0674 High 1999-08-09 Not applicable Working exploit published The BSD profil system call allows a local user to modify the internal data space of a program via profiling and execve.
CVE-1999-1518 Medium 1999-07-15 Not applicable Working exploit published Operating systems with shared memory implementations based on BSD 4.4 code allow a user to conduct a denial of service and bypass memory limits (e.g., as specified with rlimits) using mmap or shmget to allocate memory and cause page faults.
CVE-1999-0764 Medium 1999-05-01 Not applicable No public exploit NetBSD allows ARP packets to overwrite static ARP entries.
CVE-1999-0763 Medium 1999-05-01 Not applicable No public exploit NetBSD on a multi-homed host allows ARP packets on one network to modify ARP entries on another connected network.
CVE-1999-0466 High 1999-04-21 Not applicable No public exploit The SVR4 /dev/wabi special device file in NetBSD 1.3.3 and earlier allows a local user to read or write arbitrary files on the disk associated with that device.
CVE-1999-0446 Low 1999-04-12 Not applicable No public exploit Local users can perform a denial of service in NetBSD 1.3.3 and earlier versions by creating an unusual symbolic link with the ln command, triggering a bug in VFS.
CVE-1999-0434 High 1999-03-30 Not applicable No public exploit XFree86 xfs command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial of service.
CVE-1999-0433 Medium 1999-03-21 Not applicable Working exploit published XFree86 startx command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial of service.
CVE-1999-0422 Medium 1999-03-17 Not applicable No public exploit In some cases, NetBSD 1.3.3 mount allows local users to execute programs in some file systems that have the "noexec" flag set.
CVE-1999-0396 Low 1999-02-17 Not applicable No public exploit A race condition between the select() and accept() calls in NetBSD TCP servers allows remote attackers to cause a denial of service.
CVE-1999-0367 Low 1999-02-09 Not applicable No public exploit NetBSD netstat command allows local users to access kernel memory.
CVE-1999-1409 Low 1998-07-03 Not applicable Working exploit published The at program in IRIX 6.2 and NetBSD 1.3.2 and earlier allows local users to read portions of arbitrary files by submitting the file to at with the -f argument, which generates error messages that at sends to the user via e-mail.
CVE-1999-0303 Medium 1998-05-21 Not applicable No public exploit Buffer overflow in BNU UUCP daemon (uucpd) through long hostnames.
CVE-1999-0011 Medium 1998-04-08 Not applicable No public exploit Denial of Service vulnerabilities in BIND 4.9 and BIND 8 Releases via CNAME record and zone transfer.
CVE-1999-0010 Medium 1998-04-08 Not applicable No public exploit Denial of Service vulnerability in BIND 8 Releases via maliciously formatted DNS messages.
CVE-1999-0009 High 1998-04-08 Not applicable Working exploit published Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases.
CVE-1999-0323 High 1998-02-20 Not applicable No public exploit FreeBSD mmap function allows users to modify append-only or immutable files.
CVE-1999-0304 High 1998-02-01 Not applicable No public exploit mmap function in BSD allows local attackers in the kmem group to modify memory through devices.
CVE-1999-0513 Medium 1998-01-05 Not applicable Working exploit published ICMP messages to broadcast addresses are allowed, allowing for a Smurf attack that can cause a denial of service.
CVE-1999-0015 Medium 1997-12-16 Not applicable Working exploit published Teardrop IP denial of service.
CVE-1999-0017 High 1997-12-10 Not applicable No public exploit FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce.
CVE-1999-0016 Medium 1997-12-01 Not applicable Working exploit published Land IP denial of service.
CVE-1999-1214 Low 1997-09-15 Not applicable No public exploit The asynchronous I/O facility in 4.4 BSD kernel does not check user credentials when setting the recipient of I/O notification, which allows local users to cause a denial of service by using certain ioctl and fcntl calls to cause the signal to be sent to an arbitrary process ID.
CVE-1999-1225 Medium 1997-08-24 Not applicable No public exploit rpc.mountd on Linux, Ultrix, and possibly other operating systems, allows remote attackers to determine the existence of a file on the server by attempting to mount that file, which generates different error messages depending on whether the file exists or not.
CVE-1999-0628 Medium 1997-07-01 Not applicable No public exploit The rwho/rwhod service is running, which exposes machine status and user information.
CVE-1999-0074 Medium 1997-07-01 Not applicable No public exploit Listening TCP ports are sequentially allocated, allowing spoofing attacks.
CVE-1999-0046 High 1997-02-06 Not applicable Working exploit published Buffer overflow of rlogin program using TERM environmental variable.
CVE-1999-0297 High 1996-12-12 Not applicable No public exploit Buffer overflow in Vixie Cron library up to version 3.0 allows local users to obtain root access via a long environmental variable.
CVE-1999-0085 High 1996-08-21 Not applicable No public exploit Buffer overflow in rwhod on AIX and other operating systems allows remote attackers to execute arbitrary code via a UDP packet with a long hostname.
‹ prev page 2 of 2 next ›