PT-2001-2644 · Openbsd · Openbsd

Name of the Vulnerable Software and Affected Versions: OpenBSD versions 2.9 through 3.0 Description: The issue allows local users to cause a denial of service and trigger a null dereference due to the uipc system calls providing user mode return instead of kernel mode values to the fdrelease...

[SECURITY] New version of mirror fixes remote exploit

We have received reports that the version of mirror as distributed in Debian GNU/Linux 2.1 could be remotely exploited. When mirroring a remote site the remote site could use filename-constructions like " .." that would case mirror to work one level above the target directory for the mirrored...