🟡 Medium ⏱ 10–30 min Last verified: 25 December 2023 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: chrony <= 3.5.1 data corruption through symlink vulnerability writing the pidfile Related CVEs: CVE-2015-1821 CVE-2015-1822 CVE-2015-1853 CVE-2020-14367 Upstream summary: Miroslav Lichvar reports: chrony-3.5.1 […] fixes a security issue in writing […]
🟢 Low ⏱ 5–15 min Last verified: 25 December 2023 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Bacula-Web — Multiple Vulnerabilities Related CVEs: CVE-2021-26119 CVE-2021-26120 Upstream summary: Bacula-Web reports: Address Smarty CVE Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]
🟢 Low ⏱ 5–15 min Last verified: 25 December 2023 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libproxy — stack-based buffer overflow Related CVEs: CVE-2012-4504 Upstream summary: Tomas Hoger reports: A buffer overflow flaw was discovered in the libproxy's url::get_pac() used to download proxy.pac proxy auto-configuration file. […]
🟠 High ⏱ 15–60 min Last verified: 25 December 2023 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: SquirrelMail — post-authentication access privileges Related CVEs: CVE-2004-1036 CVE-2005-0075 CVE-2005-0103 CVE-2005-0104 CVE-2005-1769 CVE-2005-2095 CVE-2006-0188 CVE-2006-0195 +6 more Upstream summary: Florian Grunow reports: An attacker able to exploit this vulnerability can […]
Introduction Deploying configure suricata ids on freebsd 14 on a FreeBSD 14 machine differs from Linux in several important ways: packages come from the FreeBSD Ports Collection or the binary pkg repository, services are registered in /etc/rc.conf via sysrc(8), and firewall rules are written in pf.conf(5) syntax. This tutorial stays entirely within the standard base […]
🟢 Low ⏱ 5–15 min Last verified: 25 December 2023 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: isc-dhcp-client — Stack overflow vulnerability Related CVEs: CVE-2009-0692 Upstream summary: US-CERT reports: The ISC DHCP dhclient application contains a stack buffer overflow, which may allow a remote, unauthenticated attacker to […]
Introduction This guide explains how to Install Pulumi on FreeBSD 14 on FreeBSD 14. FreeBSD uses the pkg(8) binary package manager, rc.conf(5) for service startup configuration, and pf(4) as its primary packet filter. There is no SELinux or AppArmor — instead, FreeBSD provides the MAC (Mandatory Access Control) framework and Capsicum for fine-grained privilege separation. […]
🟢 Low ⏱ 5–15 min Last verified: 24 December 2023 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: punbb — NULL byte injection vulnerability Related CVEs: CVE-2006-4759 Upstream summary: CVE Mitre reports: PunBB 1.2.12 does not properly handle an avatar directory pathname ending in %00, which allows remote […]
🟡 Medium ⏱ 10–30 min Last verified: 24 December 2023 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: TYPO3 — multiple vulnerabilities Related CVEs: CVE-2019-10912 CVE-2019-12747 CVE-2019-12748 Upstream summary: TYPO3 news: Please read the corresponding Security Advisories for details. Table of contents Symptom & Impact Environment & Reproduction […]
🟢 Low ⏱ 5–15 min Last verified: 24 December 2023 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ark — extraction outside of extraction directory Related CVEs: CVE-2020-16116 CVE-2020-24654 Upstream summary: Albert Astals Cid reports: Overview A maliciously crafted TAR archive containing symlink entries would install files anywhere […]
