🟡 Medium ⏱ 10–30 min Last verified: 28 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Apache 1.3 — mod_proxy reverse proxy exposure Related CVEs: CVE-2003-0993 CVE-2004-0940 CVE-2005-2088 CVE-2005-3352 CVE-2006-3747 CVE-2011-3368 Upstream summary: Apache HTTP server project reports: An exposure was found when using mod_proxy in […]
🟢 Low ⏱ 5–15 min Last verified: 28 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: horde-base — XSS: VCARD attachments vulnerability Related CVEs: CVE-2008-3823 CVE-2008-3824 Upstream summary: The Horde team reports: The major changes compared to Horde version 3.3.10 are: * Fixed XSS vulnerability when […]
Introduction FreeBSD 12 is a UNIX-derived operating system renowned for its network stack performance, ZFS integration, and Jail isolation primitives. Setting up set up bgp routing with bird on freebsd 12 on FreeBSD 12 follows the rc.conf/service(8) paradigm rather than systemd, which means enabling a service and configuring its startup options are done differently from […]
🟢 Low ⏱ 5–15 min Last verified: 28 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: fidogate — write files as `news' user Upstream summary: Neils Heinen reports that the setuid `news' binaries installed as part of fidogate may be used to create files or append […]
🟠 High ⏱ 15–60 min Last verified: 28 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: MariaDB — Vulnerability in C API Related CVEs: CVE-2015-3194 CVE-2015-4792 CVE-2015-4802 CVE-2015-4807 CVE-2015-4815 CVE-2015-4826 CVE-2015-4830 CVE-2015-4836 +12 more Upstream summary: MariaDB reports: Difficult to exploit vulnerability allows unauthenticated attacker with […]
🟢 Low ⏱ 5–15 min Last verified: 27 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mod_jk — information disclosure Related CVEs: CVE-2014-8111 Upstream summary: NIST reports: Apache Tomcat Connectors (mod_jk) before 1.2.41 ignores JkUnmount rules for subtrees of previous JkMount rules, which allows remote attackers […]
🟢 Low ⏱ 5–15 min Last verified: 27 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ricochet — information disclosure Upstream summary: special reports: By sending a nickname with some HTML tags in a contact request, an attacker could cause Ricochet to make network requests without […]
🟢 Low ⏱ 5–15 min Last verified: 27 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: lftp — multiple HTTP client download filename vulnerability Related CVEs: CVE-2003-0963 CVE-2010-2251 Upstream summary: The get1 command, as used by lftpget, in LFTP before 4.0.6 does not properly validate a […]
🟢 Low ⏱ 5–15 min Last verified: 26 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: php5 — multiple vulnerabilities Related CVEs: CVE-2015-4643 CVE-2015-4644 Upstream summary: The PHP project reports: DOM and GD: Fixed bug #69719 (Incorrect handling of paths with NULs). FTP: Improved fix for […]
Introduction FreeBSD 12 is a UNIX-derived operating system renowned for its network stack performance, ZFS integration, and Jail isolation primitives. Setting up set up gitlab runner on freebsd 12 on FreeBSD 12 follows the rc.conf/service(8) paradigm rather than systemd, which means enabling a service and configuring its startup options are done differently from any Linux […]
