BSD

NetBSD 10.0 — scponly — vulnerability — patch and remediation guide — diagnosis and fix on NetBSD 10.0

NetBSD 10.0 — scponly — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2007-6350 Upstream summary: pkgsrc audit-packages flagged scponly<4.0 for vulnerability class 'arbitrary-command-execution'. Reference: http://www.securityfocus.com/archive/1/383046 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]

Read more
FreeBSD 14 — py310-impacket — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — py310-impacket — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 28 August 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-impacket — multiple path traversal vulnerabilities Related CVEs: CVE-2021-31800 Upstream summary: asolino reports: Multiple path traversal vulnerabilities exist in smbserver.py in Impacket through 0.9.22. An attacker that connects to a […]

Read more
FreeBSD 14 — py311-configobj — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — py311-configobj — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 28 August 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Configobj — Regular Expression Denial of Service attack Related CVEs: CVE-2023-26112 Upstream summary: [email protected] reports: All versions of the package configobj are vulnerable to Regular Expression Denial of Service (ReDoS) […]

Read more
NetBSD 10.0 — f2c — vulnerability — patch and remediation guide — diagnosis and fix on NetBSD 10.0

NetBSD 10.0 — f2c — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Upstream summary: pkgsrc audit-packages flagged f2c<20001205nb8 for vulnerability class 'local-file-write'. Reference: http://www.debian.org/security/2005/dsa-661 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary […]

Read more
NetBSD 10.0 — mldonkey — vulnerability — patch and remediation guide — diagnosis and fix on NetBSD 10.0

NetBSD 10.0 — mldonkey — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2007-4100 Upstream summary: pkgsrc audit-packages flagged mldonkey>=2.8.4<3.0.0 for vulnerability class 'remote-file-access'. Reference: https://savannah.nongnu.org/patch/?6754 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]

Read more
FreeBSD 14 — uriparser — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — uriparser — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 28 August 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: uriparser — Multiple vulnerabilities Related CVEs: CVE-2018-19198 CVE-2018-19199 CVE-2018-19200 CVE-2021-46141 CVE-2021-46142 Upstream summary: Upstream project reports: Fix a bug affecting both uriNormalizeSyntax* and uriMakeOwner* functions where the text range in […]

Read more
NetBSD 10.0 — asterisk — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on NetBSD 10.0

NetBSD 10.0 — asterisk — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2006-1827 CVE-2007-2293 CVE-2007-3762 CVE-2007-4103 CVE-2020-35776 CVE-2021-26712 CVE-2021-26713 CVE-2021-26717  +12 more Upstream summary: pkgsrc audit-packages flagged asterisk<1.0.8 for vulnerability class 'remote-code-execution'. Reference: http://www.bindshell.net/voip/advisory-05-013.txt Table of contents Symptom & Impact Environment […]

Read more
FreeBSD 14 — tikiwiki — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — tikiwiki — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 28 August 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: tikiwiki — multiple vulnerabilities Related CVEs: CVE-2006-4299 CVE-2006-4602 Upstream summary: Secunia reports: Thomas Pollet has discovered a vulnerability in TikiWiki, which can be exploited by malicious people to conduct cross-site […]

Read more
FreeBSD 14 — foreman-proxy — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — foreman-proxy — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 28 August 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: foreman-proxy SSL verification issue Related CVEs: CVE-2014-3691 Upstream summary: Foreman Security reports: The smart proxy when running in an SSL-secured mode permits incoming API calls to any endpoint without requiring, […]

Read more
NetBSD 9.4 — p5-File-Temp — vulnerability — patch and remediation guide — diagnosis and fix on NetBSD 9.4

NetBSD 9.4 — p5-File-Temp — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2011-4116 Upstream summary: pkgsrc audit-packages flagged p5-File-Temp-[0-9]* for vulnerability class 'symlink-attack'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2011-4116 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]

Read more
CHAT