Introduction Deploying set up bgp routing with bird on freebsd 13 on a FreeBSD 13 machine differs from Linux in several important ways: packages come from the FreeBSD Ports Collection or the binary pkg repository, services are registered in /etc/rc.conf via sysrc(8), and firewall rules are written in pf.conf(5) syntax. This tutorial stays entirely within […]
🟢 Low ⏱ 5–15 min Last verified: 1 September 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: weechat — Arbitrary shell command execution via scripts Related CVEs: CVE-2012-5854 Upstream summary: Sebastien Helleu reports: Untrusted command for function hook_process could lead to execution of commands, because of shell […]
🟢 Low ⏱ 5–15 min Last verified: 1 September 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ChaSen — buffer overflow Related CVEs: CVE-2011-4000 Upstream summary: JVN iPedia reports: ChaSen provided by Nara Institute of Science and Technology is a software for morphologically analyzing Japanese. ChaSen contains […]
🟢 Low ⏱ 5–15 min Last verified: 1 September 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libaudiofile — heap-based overflow in Microsoft ADPCM compression module Related CVEs: CVE-2014-0159 Upstream summary: Debian reports: Heap-based buffer overflow in msadpcm.c in libaudiofile in audiofile 0.2.6 allows context-dependent attackers to […]
Introduction How to Use Podman on FreeBSD 13 is a core administration task for any FreeBSD 13 server operator. FreeBSD 13 ships with the 15.0-RELEASE kernel, ZFS as the default root filesystem, Capsicum capability sandboxing improvements, and an updated ports tree. Unlike Linux distributions, FreeBSD uses rc(8) for service management, pf for packet filtering, and […]
🟠 High ⏱ 15–60 min Last verified: 1 September 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mplayer — vulnerability in STR files processor Related CVEs: CVE-2004-0433 CVE-2004-1187 CVE-2004-1188 CVE-2005-1195 CVE-2006-0579 CVE-2006-1502 CVE-2006-6172 CVE-2007-1246 +8 more Upstream summary: Secunia reports: The vulnerability is caused due to a […]
🟢 Low ⏱ 5–15 min Last verified: 1 September 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: p5-Archive-Zip — virus detection evasion Upstream summary: An AMaViS Security Announcement reports that a vulnerability exist in the Archive::Zip Perl module which may lead to bypass of malicious code in […]
🟢 Low ⏱ 5–15 min Last verified: 1 September 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: eyeOS — multiple XSS security bugs Related CVEs: CVE-2006-5071 Upstream summary: eyeOS team reports: [EyeOS 0.9.1] release fixes two XSS security bugs, so we recommend all users to upgrade to […]
🟢 Low ⏱ 5–15 min Last verified: 31 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ircII — denial of service Related CVEs: CVE-2021-29376 Upstream summary: Michael Ortmann reports: ircii has a bug in parsing CTCP UTC messages. Its unknown if this could also be used […]
🟡 Medium ⏱ 10–30 min Last verified: 31 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: tiff — buffer overflow vulnerability Related CVEs: CVE-2004-0803 CVE-2004-0804 CVE-2004-0886 CVE-2004-1308 CVE-2005-1544 Upstream summary: A Gentoo Linux Security Advisory reports: Tavis Ormandy of the Gentoo Linux Security Audit Team discovered […]
