BSD

FreeBSD 12 — dia — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — dia — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 20 March 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: dia — remote command execution vulnerability Related CVEs: CVE-2006-1550 CVE-2008-5984 Upstream summary: Security Focus reports: An attacker could exploit this issue by enticing an unsuspecting victim to execute the vulnerable […]

Read more
FreeBSD 12 — lives — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — lives — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 20 March 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: lives — insecure files permissions Upstream summary: Debian reports: smogrify script creates insecure temporary files. lives creates and uses world-writable directory. Table of contents Symptom & Impact Environment & Reproduction […]

Read more
FreeBSD 12 — phoenix — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — phoenix — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 20 March 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: firefox & mozilla — multiple vulnerabilities Related CVEs: CVE-2004-0762 CVE-2004-0765 CVE-2004-0904 CVE-2004-0905 CVE-2004-0908 CVE-2004-0909 CVE-2004-1156 CVE-2004-1157  +12 more Upstream summary: A Mozilla Foundation Security Advisory reports of multiple issues: Heap […]

Read more
FreeBSD 12 — tkdiff — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — tkdiff — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 19 March 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: tkdiff — temporary file symlink privilege escalation Related CVEs: CVE-2005-3343 Upstream summary: Javier Fernández-Sanguino Peña reports a vulnerability in tkdiff which allows local users to gain priveleges of the user […]

Read more
FreeBSD 12 — okular — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — okular — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 18 March 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Okular — Local binary execution via action links Upstream summary: Albert Astals Cid: Okular can be tricked into executing local binaries via specially crafted PDF files. This binary execution can […]

Read more
FreeBSD 12 — ja-samba — multiple vulnerabilities (15 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — ja-samba — multiple vulnerabilities (15 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 18 March 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: samba — potential leakage of arbitrary memory contents Related CVEs: CVE-2004-0600 CVE-2004-0686 CVE-2004-0815 CVE-2004-1154 CVE-2006-1059 CVE-2006-3403 CVE-2007-0452 CVE-2007-0454  +7 more Upstream summary: Samba Team reports: Samba 3.0.29 and beyond contain […]

Read more
FreeBSD 12 — dia-gnome — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — dia-gnome — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 18 March 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: dia — XFig Import Plugin Buffer Overflow Related CVEs: CVE-2006-1550 Upstream summary: Secunia reports: Some vulnerabilities have been reported in Dia, which potentially can be exploited by malicious people to […]

Read more
FreeBSD 12 — isc-dhcp43-server — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — isc-dhcp43-server — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 18 March 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: isc-dhcp — Multiple vulnerabilities Related CVEs: CVE-2015-8605 CVE-2018-5732 CVE-2018-5733 Upstream summary: ISC reports: Failure to properly bounds check a buffer used for processing DHCP options allows a malicious server (or […]

Read more
FreeBSD 12 — enscript-a — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — enscript-a — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 18 March 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: enscript — arbitrary code execution vulnerability Related CVEs: CVE-2004-1184 CVE-2004-1185 CVE-2004-1186 CVE-2008-3863 CVE-2008-4306 Upstream summary: Ulf Harnhammar of Secunia Research reports: Stack-based buffer overflow in the read_special_escape function in src/psgen.c […]

Read more
CHAT