SSLtelnet contains a format string vulnerability that could allow remote code execution and privilege escalation.

The remote host is running a version of the FreeBSD kernel which may be contains a programming error in the shmat(2) system call which can let a local attacker to gain read or write access to a portion of the kernel memory which in turn might be used to elevate his privileges or gain access to sensitive information.

The remote host is running a version of FreeBSD 5.2 older than FreeBSD 5.2.1-p4

There is a programming error in the version of this kernel which may allow a local attacker to read portions of the kernel memory or to cause a system panic by misusing the setsockopt() system call on IPv6 sockets.

The remote host is running a version of the FreeBSD kernel which may be vulnerable to a remote denial of service attack when processing many out of sequence TCP packets.

A remotely exploitable heap buffer overflow vulnerability was found in MPlayer's URL decoding code. If an attacker can cause MPlayer to visit a specially crafted URL, arbitrary code execution with the privileges of the user running MPlayer may occur. A `visit' might be caused by social engineering, or a malicious web server could use HTTP redirects which MPlayer would then process.

The remote host is running a version of FreeBSD which contains a bug in the mksnap_ffs(8) utility which may reset file flags on the remote file system, thus resetting the type of access control that were assigned to a file.

The remote host is running a version of the FreeBSD kernel which contains a programming error in the way it handles some Linux system calls, which may be exploited by an attacker to gain super-user privileges on the remote host, or to crash it.

The remote host is running a version of the FreeBSD kernel which contains a bug which may allow a jailed process to attach to another jail.

An attacker compromised a jailed process on the remote host could exploit this flaw to switch to other jails on the system.

The remote host is running a version of the FreeBSD kernel which contains a bug which may allow a jailed process to modify the host routing tables of the whole system.

The remote host is running a version of FreeBSD which contains a heap overflow in the cvs pserver code. This flaw may be used by an attacker to execute arbitrary code on the remote host, provided that it's running a cvs pserver.

The remote host is running a version of FreeBSD which contains a programming error in the msync(2) system call which may let a local user with read access to a given file to forbid any change to this file to be written to disk.

ID	Name	Severity
12617	FreeBSD : Format string vulnerability in SSLtelnet (4aec9d58-ce7b-11d8-858d-000d610a3b12)	critical
12614	FreeBSD : SA-04:02.shmat	medium
12613	FreeBSD : SA-04:06.ipv6 : setsockopt()	low
12589	FreeBSD : SA-04:04.tcp	medium
12581	FreeBSD : mplayer heap overflow in http requests (5e7f58c3-b3f8-4258-aeb8-795e5e940ff8)	high
12575	FreeBSD : SA-04:01.mksnap_ff	medium
12566	FreeBSD : SA-04:13.linux	low
12556	FreeBSD : SA-04:03.jail	medium
12555	FreeBSD : SA-04:12.jailroute	high
12530	FreeBSD : SA-04:10.cvs	high
12527	FreeBSD : SA-04:11.msync	low

Detections

Analytics

FreeBSD Local Security Checks Family for Nessus

critical

medium

low

medium

high

medium

low

medium

high

high

low