🟠 High ⏱ 15–60 min Last verified: 10 December 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mozilla — multiple vulnerabilities Related CVEs: CVE-2007-4879 CVE-2007-5959 CVE-2008-0016 CVE-2008-0412 CVE-2008-0413 CVE-2008-0414 CVE-2008-0415 CVE-2008-0417 +12 more Upstream summary: The Mozilla Foundation reports: MFSA 2008-37 UTF-8 URL stack buffer overflow MFSA […]
🟢 Low ⏱ 5–15 min Last verified: 9 December 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: pureftpd — multiple vulnerabilities Related CVEs: CVE-2011-0418 CVE-2011-1575 Upstream summary: Pure-FTPd development team reports: Support for braces expansion in directory listings has been disabled — Cf. CVE-2011-0418. Fix a STARTTLS […]
🟢 Low ⏱ 5–15 min Last verified: 9 December 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: miniupnpc — integer signedness error Related CVEs: CVE-2015-6031 CVE-2017-8798 Upstream summary: Tintinweb reports: An integer signedness error was found in miniupnp's miniwget allowing an unauthenticated remote entity typically located on […]
🟢 Low ⏱ 5–15 min Last verified: 9 December 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: opera — moderately severe issue Upstream summary: Opera reports: Fixed a moderately severe issue, as reported by Attila Suszte. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]
🟢 Low ⏱ 5–15 min Last verified: 8 December 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: diffoscope — arbitrary file write Related CVEs: CVE-2017-0359 Upstream summary: Ximin Luo reports: [v67] introduced a security hole where diffoscope may write to arbitrary locations on disk depending on the […]
🟢 Low ⏱ 5–15 min Last verified: 8 December 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: fuser — missing user's privileges check Upstream summary: Denis Barov reports: sysutils/fuser allows user to send any signal to any process when installed with suid bit. Table of contents Symptom […]
🟡 Medium ⏱ 10–30 min Last verified: 8 December 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: urllib3 — multiple vulnerabilities Related CVEs: CVE-2018-20060 CVE-2019-11236 CVE-2019-11324 Upstream summary: NIST reports: (by search in the range 2018/01/01 – 2019/11/10): urllib3 before version 1.23 does not remove the Authorization […]
🟢 Low ⏱ 5–15 min Last verified: 7 December 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: gnupg — attacker who obtains 4640 bits from the RNG can trivially predict the next 160 bits of output Related CVEs: CVE-2016-6313 Upstream summary: Werner Koch reports: There was a […]
OSSEC is an open source, host-based intrusion detection system (HIDS) that performs log analysis, integrity checking, Windows registry monitoring, rootkit detection, time-based alerting, and active response. This tutorial will show you how to install and configure OSSEC to monitor a cloud servers running FreeBSD 10.1.
🟠 High ⏱ 15–60 min Last verified: 7 December 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: FreeBSD — Incorrect libcap_net limitation list manipulation Related CVEs: CAN-2005-2693 CAN-2005-3011 CVE-2003-0914 CVE-2003-0989 CVE-2003-1029 CVE-2004-0057 CVE-2004-0079 CVE-2004-0099 +12 more Upstream summary: Problem Description: In the case of the cap_net service, […]
