|
231
|
-
4.3
|
MEDIUM
|
The makemask function in mountd.c in mountd in FreeBSD 7.4 through 8.2 does not properly handle a -network field specifying a CIDR block with a prefix length that is not an integer multiple of 8, whi…
|
CWE-20
Improper Input Validation
|
CVE-2011-1739
|
cpe:2.3:o:freebsd:freebsd:8.2:*
cpe:2.3:o:freebsd:freebsd:8.1:*
cpe:2.3:o:freebsd:freebsd:8.0:*
cpe:2.3:o:free…
|
|
|
|
|
2024-11-21 10:26
2011-05-4
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
232
|
-
4.0
|
MEDIUM
|
The (1) remote_glob function in sftp-glob.c and the (2) process_put function in sftp.c in OpenSSH 5.8 and earlier, as used in FreeBSD 7.3 and 8.1, NetBSD 5.0.2, OpenBSD 4.7, and other products, allow…
|
CWE-399
Resource Management Errors
|
CVE-2010-4755
|
cpe:2.3:o:freebsd:freebsd:8.1:*
cpe:2.3:o:freebsd:freebsd:7.3:*
|
|
|
|
|
2024-11-21 10:21
2011-03-3
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
233
|
-
4.0
|
MEDIUM
|
The glob implementation in libc in FreeBSD 7.3 and 8.1, NetBSD 5.0.2, and OpenBSD 4.7, and Libsystem in Apple Mac OS X before 10.6.8, allows remote authenticated users to cause a denial of service (C…
|
CWE-399
Resource Management Errors
|
CVE-2010-4754
|
cpe:2.3:o:freebsd:freebsd:8.1:*
cpe:2.3:o:freebsd:freebsd:7.3:*
|
|
|
|
|
2024-11-21 10:21
2011-03-3
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
234
|
7.8
7.2
|
HIGH
Local
|
The pfs_getextattr function in FreeBSD 7.x before 7.3-RELEASE and 8.x before 8.0-RC1 unlocks a mutex that was not previously locked, which allows local users to cause a denial of service (kernel pani…
|
CWE-667
Improper Locking
|
CVE-2010-4210
|
cpe:2.3:o:freebsd:freebsd:8.0:p6
cpe:2.3:o:freebsd:freebsd:8.0:p5
cpe:2.3:o:freebsd:freebsd:8.0:p4
cpe:2.3:o:f…
|
7.0
|
|
|
7.3
|
2024-11-21 10:20
2010-11-22
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
235
|
-
7.2
|
HIGH
|
FreeBSD 7.1 through 8.1-PRERELEASE does not copy the read-only flag when creating a duplicate mbuf buffer reference, which allows local users to cause a denial of service (system file corruption) and…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2010-2693
|
cpe:2.3:o:freebsd:freebsd:8.1:pre-release
cpe:2.3:o:freebsd:freebsd:8.0:*
cpe:2.3:o:freebsd:freebsd:7.3:*
cpe:…
|
|
|
|
|
2024-11-21 10:17
2010-07-14
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
236
|
-
9.3
|
HIGH
|
Off-by-one error in the __opiereadrec function in readrec.c in libopie in OPIE 2.4.1-test1 and earlier, as used on FreeBSD 6.4 through 8.1-PRERELEASE and other platforms, allows remote attackers to c…
|
CWE-189
Numeric Errors
|
CVE-2010-1938
|
cpe:2.3:o:freebsd:freebsd:8.1-prerelease:*
cpe:2.3:o:freebsd:freebsd:8.0:*
cpe:2.3:o:freebsd:freebsd:7.2:stable
|
|
|
|
2011-07-29 11:37
2010-05-29
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
|
237
|
-
6.9
|
MEDIUM
|
sys/nfsclient/nfs_vfsops.c in the NFS client in the kernel in FreeBSD 7.2 through 8.1-PRERELEASE, when vfs.usermount is enabled, does not validate the length of a certain fhsize parameter, which allo…
|
CWE-20
Improper Input Validation
|
CVE-2010-2020
|
cpe:2.3:o:freebsd:freebsd:8.1-prerelease:*
cpe:2.3:o:freebsd:freebsd:8.0:*
cpe:2.3:o:freebsd:freebsd:7.2:stable
|
|
|
|
2012-11-6 13:41
2010-05-29
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
|
238
|
-
3.3
|
LOW
|
jail.c in jail in FreeBSD 8.0 and 8.1-PRERELEASE, when the "-l -U root" options are omitted, does not properly restrict access to the current working directory, which might allow local users to read,…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2010-2022
|
cpe:2.3:o:freebsd:freebsd:8.1-prerelease:*
cpe:2.3:o:freebsd:freebsd:8.0:*
|
|
|
|
|
2010-06-1 13:00
2010-05-29
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
239
|
-
6.9
|
MEDIUM
|
The replay functionality for ZFS Intent Log (ZIL) in FreeBSD 7.1, 7.2, and 8.0, when creating files during replay of a setattr transaction, uses 7777 permissions instead of the original permissions, …
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2010-0318
|
cpe:2.3:o:freebsd:freebsd:8.0:*
cpe:2.3:o:freebsd:freebsd:7.2:*
cpe:2.3:o:freebsd:freebsd:7.1:*
|
|
|
|
|
2026-04-23 09:35
2010-01-16
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
240
|
-
4.7
|
MEDIUM
|
freebsd-update in FreeBSD 8.0, 7.2, 7.1, 6.4, and 6.3 uses insecure permissions in its working directory (/var/db/freebsd-update by default), which allows local users to read copies of sensitive file…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2009-4358
|
cpe:2.3:o:freebsd:freebsd:8.0:*
cpe:2.3:o:freebsd:freebsd:7.2:*
cpe:2.3:o:freebsd:freebsd:7.1:*
cpe:2.3:o:free…
|
|
|
|
|
2026-04-23 09:35
2009-12-20
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|