GCVE - cpe:2.3:o:bsd:bsd:4.4:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:bsd:bsd:4.4:*:*:*:*:*:*:*

part: o version: 4.4 update: *

Vendor	Bsd (`a2a580a6-80bb-5da4-875b-de38dfa4aea5`)
Product	Bsd (`4c5ba2bf-4392-5534-9597-bf5cfd8d78c7`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2008-4609`	vulnerable	2026-06-08 04:50:46.244224	Details available The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other operating systems allows remote attackers to cause a denial of service (connection queue exhaustion) via multiple vectors that manipulate information in the TCP state table, as demonstrated by sockstress. Published: 2008-10-20T17:00:00.000Z Updated: 2024-08-07T10:24:20.677Z Open on db.gcve.eu Reference links http://blog.robertlee.name/2008/10/conjecture-speculation.html https://www.cert.fi/haavoittuvuudet/2008/tcp-vulnerabilities.html http://marc.info/?l=bugtraq&m=125856010926699&w=2 http://lists.immunitysec.com/pipermail/dailydave/2008-October/005360.html http://insecure.org/stf/tcp-dos-attack-explained.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-1999-1394`	vulnerable	2026-06-08 04:44:58.297946	Details available BSD 4.4 based operating systems, when running at security level 1, allow the root user to clear the immutable and append-only flags for files by unmounting the file system and using a file system editor such as fsdb to directly modify the file through a device. Published: 2001-09-12T04:00:00.000Z Updated: 2024-08-01T17:11:03.238Z Open on db.gcve.eu Reference links http://marc.info/?l=bugtraq&m=93094058620450&w=2 http://www.securityfocus.com/bid/510	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-1999-1214`	vulnerable	2026-06-08 04:44:58.238104	Details available The asynchronous I/O facility in 4.4 BSD kernel does not check user credentials when setting the recipient of I/O notification, which allows local users to cause a denial of service by using certain ioctl and fcntl calls to cause the signal to be sent to an arbitrary process ID. Published: 2002-03-09T05:00:00.000Z Updated: 2024-08-01T17:02:53.762Z Open on db.gcve.eu Reference links http://www.openbsd.com/advisories/signals.txt http://www.openbsd.com/advisories/signals.txt http://www.osvdb.org/11062 https://exchange.xforce.ibmcloud.com/vulnerabilities/556	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.