Buffer overflow in FreeBSD setlocale in the libc module allows attackers to execute arbitrary code via a long PATH_LOCALE environment variable.

Vulnerability when Network Address Translation (NAT) is enabled in Linux 2.2.10 and earlier with ipchains, or FreeBSD 3.2 with ipfw, allows remote attackers to cause a denial of service (kernel panic) via a ping -R (record route) command.

wmmon in FreeBSD allows local users to gain privileges via the .wmmonrc configuration file.

FreeBSD seyon allows users to gain privileges via a modified PATH variable for finding the xterm and seyon-emu commands.

Buffer overflow in FreeBSD xmindpath allows local users to gain privileges via -f argument.

Buffer overflow in FreeBSD angband allows local users to gain privileges.

Buffer overflow in FreeBSD gdc program.

FreeBSD gdc program allows local users to modify files via a symlink attack.

FreeBSD mount_union command allows local users to gain root privileges via a symlink attack.

FreeBSD seyon allows local users to gain privileges by providing a malicious program in the -emulator argument.

Buffer overflow in FreeBSD seyon via HOME environmental variable, -emulator argument, -modems argument, or the GUI.

FreeBSD VFS cache (vfs_cache) allows local users to cause a denial of service by opening a large number of files.

FreeBSD, NetBSD, and OpenBSD allow an attacker to cause a denial of service by creating a large number of socket pairs using the socketpair function, setting a large buffer size via setsockopt, then writing large buffers.

FreeBSD 3.2 and possibly other versions allows a local user to cause a denial of service (panic) with a large number accesses of an NFS v3 mounted directory from a large number of processes.

Buffer overflow in bootpd on OpenBSD, FreeBSD, and Linux systems via a malformed header type.

IP fragmentation denial of service in FreeBSD allows a remote attacker to cause a crash.

TCP RST denial of service in FreeBSD.

FreeBSD allows local users to conduct a denial of service by creating a hard link from a device special file to a file on an NFS file system.

FreeBSD T/TCP Extensions for Transactions can be subjected to spoofing attacks.

FreeBSD mmap function allows users to modify append-only or immutable files.