bsdi records
39 published records for vendor bsdi.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Records by year
Bar: total · dark part: CISA KEV.
Recurring classes
- CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')2
- CWE-125 Out-of-bounds Read1
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer1
- CWE-20 Improper Input Validation1
- CWE-476 NULL Pointer Dereference1
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
39 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
56Plan | CVE-1999-0046Proof of concept | Buffer overflow of rlogin program using TERM environmental variable.bsdi · bsd os · CWE-120 | Critical10.0 | — | 51.8% | Feb 6, 1997 |
52Plan | CVE-1999-0043No exploit | Command execution via shell metachars in INN daemon (innd) 1.5 using "newgroup" and "rmgroup" control messages, and others.isc · inn · CWE-78 | Critical9.8 | — | 44.5% | Dec 4, 1996 |
49Plan | CVE-1999-0009Proof of concept | Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases.data general · dg ux | Critical10.0 | — | 29.0% | Apr 8, 1998 |
48Plan | CVE-1999-0002Proof of concept | Buffer overflow in NFS mountd gives root access to remote attackers, mostly in Linux systems.bsdi · bsd os · CWE-119 | Critical10.0 | — | 27.1% | Oct 12, 1998 |
44Plan | CVE-1999-0042Proof of concept | Buffer overflow in University of Washington's implementation of IMAP and POP servers.university of washington · imap | Critical10.0 | — | 12.7% | Apr 7, 1997 |
43Plan | CVE-1999-0879Proof of concept | Buffer overflow in WU-FTPD and related FTP servers allows remote attackers to gain root privileges via macro variables in a message file.bsdi · bsd os | Critical10.0 | — | 9.7% | Oct 1, 1999 |
41Plan | CVE-1999-0099No exploit | Buffer overflow in syslog utility allows local or remote attackers to gain root privileges.bsdi · bsd os | Critical10.0 | — | 3.2% | Oct 19, 1995 |
41Plan | CVE-1999-0047No exploit | MIME conversion buffer overflow in sendmail versions 8.8.3 and 8.8.4.eric allman · sendmail | Critical10.0 | — | 3.1% | Jan 28, 1997 |
41Plan | CVE-1999-0165No exploit | NFS cache poisoning.sun · nfs | Critical10.0 | — | 1.9% | Mar 1, 1997 |
40Plan | CVE-1999-0798No exploit | Buffer overflow in bootpd on OpenBSD, FreeBSD, and Linux systems via a malformed header type.freebsd · freebsd | Critical10.0 | — | 1.6% | Dec 4, 1998 |
40Plan | CVE-1999-0323No exploit | FreeBSD mmap function allows users to modify append-only or immutable files.freebsd · freebsd | Critical10.0 | — | 1.3% | Feb 20, 1998 |
38Monitor | CVE-2008-4609Proof of concept | The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other operatinbsd · bsd · CWE-16 | High7.1 | — | 32.1% | Oct 20, 2008 |
38Monitor | CVE-1999-0704Proof of concept | Buffer overflow in Berkeley automounter daemon (amd) logging facility provided in the Linux am-utils package and others.bsdi · bsd os | Critical9.3 | — | 4.4% | Sep 16, 1999 |
33Monitor | CVE-1999-0038Proof of concept | Buffer overflow in xlock program allows local users to execute commands as root.data general · dg ux · CWE-120 | High8.4 | — | 1.3% | Apr 26, 1997 |
31Monitor | CVE-1999-0052No exploit | IP fragmentation denial of service in FreeBSD allows a remote attacker to cause a crash.freebsd · freebsd · CWE-476 | High7.5 | — | 2.1% | Nov 4, 1998 |
31Monitor | CVE-1999-1047No exploit | When BSDI patches for Gauntlet 5.0 BSDI are installed in a particular order, Gauntlet allows remote attackers to bypass firewall access restbsdi · gauntlet | High7.5 | — | 1.6% | Oct 18, 1999 |
31Monitor | CVE-1999-0022No exploit | Local user gains root privileges via buffer overflow in rdist, via expstr() function.sgi · irix · CWE-125 | High7.8 | — | 0.4% | Jul 3, 1996 |
28Monitor | CVE-1999-0040Proof of concept | Buffer overflow in Xt library of X Windowing System allows local users to execute commands with root privileges.sgi · irix | High7.2 | — | 1.2% | May 1, 1997 |
28Monitor | CVE-1999-0034Proof of concept | Buffer overflow in suidperl (sperl), Perl 4.x and 5.x.larry wall · perl | High7.2 | — | 1.1% | May 29, 1997 |
28Monitor | CVE-1999-0130Proof of concept | Local users can start Sendmail in daemon mode and gain root privileges.caldera · network desktop | High7.2 | — | 1.0% | Nov 16, 1996 |
28Monitor | CVE-1999-0032Proof of concept | Buffer overflow in lpr, as used in BSD-based systems including Linux, allows local users to execute arbitrary code as root via a long -C (clsgi · irix | High7.2 | — | 0.9% | Oct 25, 1996 |
28Monitor | CVE-2000-1103Proof of concept | rcvtty in BSD 3.0 and 4.0 does not properly drop privileges before executing a script, which allows local attackers to gain privileges by spbsdi · bsd os | High7.2 | — | 0.9% | Jan 9, 2001 |
28Monitor | CVE-1999-0023Proof of concept | Local user gains root privileges via buffer overflow in rdist, via lookup() function.inet · inet | High7.2 | — | 0.7% | Jul 24, 1996 |
28Monitor | CVE-2001-1541No exploit | Buffer overflow in Unix-to-Unix Copy Protocol (UUCP) in BSDI BSD/OS 3.0 through 4.2 allows local users to execute arbitrary code via a long bsdi · bsd os | High7.2 | — | 0.6% | Dec 31, 2001 |
28Monitor | CVE-1999-0131No exploit | Buffer overflow and denial of service in Sendmail 8.7.5 and earlier through GECOS field gives root access to local users.eric allman · sendmail | High7.2 | — | 0.5% | Sep 11, 1996 |
- CVE-1999-004656Plan
Buffer overflow of rlogin program using TERM environmental variable.
CriticalCVSS 10.0Proof of conceptEPSS 51%bsdi · bsd osFeb 6, 1997
- CVE-1999-004352Plan
Command execution via shell metachars in INN daemon (innd) 1.5 using "newgroup" and "rmgroup" control messages, and others.
CriticalCVSS 9.8No exploitEPSS 44%isc · innDec 4, 1996
- CVE-1999-000949Plan
Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases.
CriticalCVSS 10.0Proof of conceptEPSS 29%data general · dg uxApr 8, 1998
- CVE-1999-000248Plan
Buffer overflow in NFS mountd gives root access to remote attackers, mostly in Linux systems.
CriticalCVSS 10.0Proof of conceptEPSS 27%bsdi · bsd osOct 12, 1998
- CVE-1999-004244Plan
Buffer overflow in University of Washington's implementation of IMAP and POP servers.
CriticalCVSS 10.0Proof of conceptEPSS 12%university of washington · imapApr 7, 1997
- CVE-1999-087943Plan
Buffer overflow in WU-FTPD and related FTP servers allows remote attackers to gain root privileges via macro variables in a message file.
CriticalCVSS 10.0Proof of conceptEPSS 9%bsdi · bsd osOct 1, 1999
- CVE-1999-009941Plan
Buffer overflow in syslog utility allows local or remote attackers to gain root privileges.
CriticalCVSS 10.0No exploitEPSS 3%bsdi · bsd osOct 19, 1995
- CVE-1999-004741Plan
MIME conversion buffer overflow in sendmail versions 8.8.3 and 8.8.4.
CriticalCVSS 10.0No exploitEPSS 3%eric allman · sendmailJan 28, 1997
- CVE-1999-016541Plan
NFS cache poisoning.
CriticalCVSS 10.0No exploitEPSS 1%sun · nfsMar 1, 1997
- CVE-1999-079840Plan
Buffer overflow in bootpd on OpenBSD, FreeBSD, and Linux systems via a malformed header type.
CriticalCVSS 10.0No exploitEPSS 1%freebsd · freebsdDec 4, 1998
- CVE-1999-032340Plan
FreeBSD mmap function allows users to modify append-only or immutable files.
CriticalCVSS 10.0No exploitEPSS 1%freebsd · freebsdFeb 20, 1998
- CVE-2008-460938Monitor
The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other operatin
HighCVSS 7.1Proof of conceptEPSS 32%bsd · bsdOct 20, 2008
- CVE-1999-070438Monitor
Buffer overflow in Berkeley automounter daemon (amd) logging facility provided in the Linux am-utils package and others.
CriticalCVSS 9.3Proof of conceptEPSS 4%bsdi · bsd osSep 16, 1999
- CVE-1999-003833Monitor
Buffer overflow in xlock program allows local users to execute commands as root.
HighCVSS 8.4Proof of conceptEPSS 1%data general · dg uxApr 26, 1997
- CVE-1999-005231Monitor
IP fragmentation denial of service in FreeBSD allows a remote attacker to cause a crash.
HighCVSS 7.5No exploitEPSS 2%freebsd · freebsdNov 4, 1998
- CVE-1999-104731Monitor
When BSDI patches for Gauntlet 5.0 BSDI are installed in a particular order, Gauntlet allows remote attackers to bypass firewall access rest
HighCVSS 7.5No exploitEPSS 1%bsdi · gauntletOct 18, 1999
- CVE-1999-002231Monitor
Local user gains root privileges via buffer overflow in rdist, via expstr() function.
HighCVSS 7.8No exploitEPSS 0%sgi · irixJul 3, 1996
- CVE-1999-004028Monitor
Buffer overflow in Xt library of X Windowing System allows local users to execute commands with root privileges.
HighCVSS 7.2Proof of conceptEPSS 1%sgi · irixMay 1, 1997
- CVE-1999-003428Monitor
Buffer overflow in suidperl (sperl), Perl 4.x and 5.x.
HighCVSS 7.2Proof of conceptEPSS 1%larry wall · perlMay 29, 1997
- CVE-1999-013028Monitor
Local users can start Sendmail in daemon mode and gain root privileges.
HighCVSS 7.2Proof of conceptEPSS 1%caldera · network desktopNov 16, 1996
- CVE-1999-003228Monitor
Buffer overflow in lpr, as used in BSD-based systems including Linux, allows local users to execute arbitrary code as root via a long -C (cl
HighCVSS 7.2Proof of conceptEPSS 0%sgi · irixOct 25, 1996
- CVE-2000-110328Monitor
rcvtty in BSD 3.0 and 4.0 does not properly drop privileges before executing a script, which allows local attackers to gain privileges by sp
HighCVSS 7.2Proof of conceptEPSS 0%bsdi · bsd osJan 9, 2001
- CVE-1999-002328Monitor
Local user gains root privileges via buffer overflow in rdist, via lookup() function.
HighCVSS 7.2Proof of conceptEPSS 0%inet · inetJul 24, 1996
- CVE-2001-154128Monitor
Buffer overflow in Unix-to-Unix Copy Protocol (UUCP) in BSDI BSD/OS 3.0 through 4.2 allows local users to execute arbitrary code via a long
HighCVSS 7.2No exploitEPSS 0%bsdi · bsd osDec 31, 2001
- CVE-1999-013128Monitor
Buffer overflow and denial of service in Sendmail 8.7.5 and earlier through GECOS field gives root access to local users.
HighCVSS 7.2No exploitEPSS 0%eric allman · sendmailSep 11, 1996