5.1 : Security Vulnerabilities

Cpe Name:cpe:/o:freebsd:freebsd:5.1

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : Cve Number Descending Cve Number Ascending CVSS Score Descending Number Of Exploits Descending

Copy Results Download Results Select Table

#	CVE ID	CWE ID	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2012-2143	310		2012-07-05	2013-04-18	4.3	None	Remote	Medium	Not required	None	Partial	None
The crypt_des (aka DES-based crypt) function in FreeBSD before 9.0-RELEASE-p2, as used in PHP, PostgreSQL, and other products, does not process the complete cleartext password if this password contains a 0x80 character, which makes it easier for context-dependent attackers to obtain access via an authentication attempt with an initial substring of the intended password, as demonstrated by a Unicode password.
2	CVE-2008-4609	16	DoS	2008-10-20	2012-07-21	7.1	None	Remote	Medium	Not required	None	None	Complete
The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other operating systems allows remote attackers to cause a denial of service (connection queue exhaustion) via multiple vectors that manipulate information in the TCP state table, as demonstrated by sockstress.
3	CVE-2006-2654		Dir. Trav.	2006-06-01	2008-09-05	6.4	None	Remote	Low	Not required	Partial	Partial	None
Directory traversal vulnerability in smbfs smbfs on FreeBSD 4.10 up to 6.1 allows local users to escape chroot restrictions for an SMB-mounted filesystem via "..\\" sequences. NOTE: this is similar to CVE-2006-1864, but this is a different implementation of smbfs, so it has a different CVE identifier.
4	CVE-2006-1283		+Priv	2006-03-23	2011-08-25	7.2	Admin	Local	Low	Not required	Complete	Complete	Complete
opiepasswd in One-Time Passwords in Everything (OPIE) in FreeBSD 4.10-RELEASE-p22 through 6.1-STABLE before 20060322 uses the getlogin function to determine the invoking user account, which might allow local users to configure OPIE access to the root account and possibly gain root privileges if a root shell is permitted by the configuration of the wheel group or sshd.
5	CVE-2006-0905			2006-03-23	2008-09-05	7.5	User	Remote	Low	Not required	Partial	Partial	Partial
A "programming error" in fast_ipsec in FreeBSD 4.8-RELEASE through 6.1-STABLE and NetBSD 2 through 3 does not properly update the sequence number associated with a Security Association, which allows packets to pass sequence number checks and allows remote attackers to capture IPSec packets and conduct replay attacks.
6	CVE-2006-0055			2006-01-11	2008-09-05	2.1	None	Local	Low	Not required	None	Partial	None
The ispell_op function in ee on FreeBSD 4.10 to 6.0 uses predictable filenames and does not confirm which file is being written, which allows local users to overwrite arbitrary files via a symlink attack when ee invokes ispell.
7	CVE-2005-2218		Bypass	2005-07-26	2008-09-05	7.2	Admin	Local	Low	Not required	Complete	Complete	Complete
The device file system (devfs) in FreeBSD 5.x does not properly check parameters of the node type when creating a device node, which makes hidden devices available to attackers, who can then bypass restrictions on a jailed process.
8	CVE-2005-2068			2005-07-05	2008-09-05	5.0	None	Remote	Low	Not required	None	Partial	None
FreeBSD 4.x through 4.11 and 5.x through 5.4 allows remote attackers to modify certain TCP options via a TCP packet with the SYN flag set for an already established session.
9	CVE-2005-1406			2005-05-06	2008-09-05	4.6	None	Local	Low	Not required	Partial	Partial	Partial
The kernel in FreeBSD 4.x to 4.11 and 5.x to 5.4 does not properly clear certain fixed-length buffers when copying variable-length data for use by applications, which could allow those applications to read previously used sensitive memory.
10	CVE-2005-1400			2005-05-06	2008-09-05	4.6	None	Local	Low	Not required	Partial	Partial	Partial
The i386_get_ldt system call in FreeBSD 4.7 to 4.11 and 5.x to 5.4 allows local users to access sensitive kernel memory via arguments with negative or very large values.
11	CVE-2005-1399			2005-05-06	2008-09-05	4.6	User	Local	Low	Not required	Partial	Partial	Partial
FreeBSD 4.6 to 4.11 and 5.x to 5.4 uses insecure default permissions for the /dev/iir device, which allows local users to execute restricted ioctl calls to read or modify data on hardware that is controlled by the iir driver.
12	CVE-2005-1126	399		2005-04-15	2008-09-05	2.1	None	Local	Low	Not required	Partial	None	None
The SIOCGIFCONF ioctl (ifconf function) in FreeBSD 4.x through 4.11 and 5.x through 5.4 does not properly clear a buffer before using it, which allows local users to obtain portions of sensitive kernel memory.
13	CVE-2005-1036		DoS +Priv Bypass +Info	2005-05-02	2008-09-05	7.2	Admin	Local	Low	Not required	Complete	Complete	Complete
FreeBSD 5.x to 5.4 on AMD64 does not properly initialize the IO permission bitmap used to allow user access to certain hardware, which allows local users to bypass intended access restrictions to cause a denial of service, obtain sensitive information, and possibly gain privileges.
14	CVE-2005-0988			2005-05-02	2010-08-21	3.7	None	Local	High	Not required	Partial	Partial	Partial
Race condition in gzip 1.2.4, 1.3.3, and earlier, when decompressing a gzipped file, allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by gzip after the decompression is complete.
15	CVE-2005-0708		+Info	2005-05-02	2008-09-10	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
The sendfile system call in FreeBSD 4.8 through 4.11 and 5 through 5.4 can transfer portions of kernel memory if a file is truncated while it is being sent, which could allow remote attackers to obtain sensitive information.
16	CVE-2005-0610		Exec Code	2005-04-12	2008-09-05	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Multiple symlink vulnerabilities in portupgrade before 20041226_2 in FreeBSD allow local users to (1) overwrite arbitrary files and possibly replace packages to execute arbitrary code via pkg_fetch, (2) overwrite arbitrary files via temporary files when portupgrade upgrades a port or package, or (3) create arbitrary zero-byte files via the pkgdb.fixme temporary file.
17	CVE-2005-0356		DoS	2005-05-31	2008-09-05	5.0	None	Remote	Low	Not required	None	None	Partial
Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service (connection loss) via a spoofed packet with a large timer value, which causes the host to discard later packets because they appear to be too old.
18	CVE-2005-0109		+Info	2005-03-05	2010-08-21	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Hyper-Threading technology, as used in FreeBSD and other operating systems that are run on Intel Pentium and other processors, allows local users to use a malicious thread to create covert channels, monitor the execution of other threads, and obtain sensitive information such as cryptographic keys, via a timing attack on memory cache misses.
19	CVE-2004-1471		DoS Exec Code	2004-12-31	2008-09-05	7.1	Admin	Remote	High	Single system	Complete	Complete	Complete
Format string vulnerability in wrapper.c in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16 allows remote attackers with CVSROOT commit access to cause a denial of service (application crash) and possibly execute arbitrary code via format string specifiers in a wrapper line.
20	CVE-2004-1066		DoS	2005-01-10	2008-09-10	3.6	None	Local	Low	Not required	Partial	None	Partial
The cmdline pseudofiles in (1) procfs on FreeBSD 4.8 through 5.3, and (2) linprocfs on FreeBSD 5.x through 5.3, do not properly validate a process argument vector, which allows local users to cause a denial of service (panic) or read portions of kernel memory. NOTE: this candidate might be SPLIT into 2 separate items in the future.
21	CVE-2004-0919			2004-12-31	2008-09-05	4.6	None	Local	Low	Not required	Partial	Partial	Partial
The syscons CONS_SCRSHOT ioctl in FreeBSD 5.x allows local users to read arbitrary kernel memory via (1) negative coordinates or (2) large coordinates.
22	CVE-2004-0618		DoS	2004-12-06	2008-09-05	2.1	None	Local	Low	Not required	None	None	Partial
FreeBSD 5.1 for the Alpha processor allows local users to cause a denial of service (crash) via an execve system call with an unaligned memory address as an argument.
23	CVE-2004-0171		DoS	2004-03-15	2008-09-05	5.0	None	Remote	Low	Not required	None	None	Partial
FreeBSD 5.1 and earlier, and Mac OS X before 10.3.4, allows remote attackers to cause a denial of service (resource exhaustion of memory buffers and system crash) via a large number of out-of-sequence TCP packets, which prevents the operating system from creating new connections.
24	CVE-2004-0126		+Priv	2004-03-29	2008-09-05	4.6	User	Local	Low	Not required	Partial	Partial	Partial
The jail_attach system call in FreeBSD 5.1 and 5.2 changes the directory of a calling process even if the process doesn't have permission to change directory, which allows local users to gain read/write privileges to files and directories within another jail.
25	CVE-2004-0112		DoS	2004-11-23	2010-08-21	5.0	None	Remote	Low	Not required	None	None	Partial
The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that causes an out-of-bounds read.
26	CVE-2004-0081		DoS	2004-11-23	2010-08-21	5.0	None	Remote	Low	Not required	None	None	Partial
OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test Tool.
27	CVE-2004-0079		DoS	2004-11-23	2010-08-21	5.0	None	Remote	Low	Not required	None	None	Partial
The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.
28	CVE-2004-0002		DoS	2004-03-03	2008-09-10	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
The TCP MSS (maximum segment size) functionality in netinet allows remote attackers to cause a denial of service (resource exhaustion) via (1) a low MTU, which causes a large number of small packets to be produced, or (2) via a large number of packets with a small TCP payload, which cause a large number of calls to the resource-intensive sowakeup function.
29	CVE-2003-0804		DoS	2003-11-17	2008-09-10	5.0	None	Remote	Low	Not required	None	None	Partial
The arplookup function in FreeBSD 5.1 and earlier, Mac OS X before 10.2.8, and possibly other BSD-based systems, allows remote attackers on a local subnet to cause a denial of service (resource starvation and panic) via a flood of spoofed ARP requests.

Total number of vulnerabilities : 29 Page : 1 (This Page)