Apple Mac OSX xnu 1228.3.13 - IPv6-ipcomp Remote kernel Denial of Service (PoC)

/ xnu-ipv6-ipcomp.c Copyright c 2008 by Apple MACOS X xnu md typo?. md = mpulldownm, off, sizeofipcomp, NULL; if !m - md = mpulldownm, off, sizeofipcomp, NULL; if !md bsd/netinet6/ipcompinput.c curiosly the same bug exists in ipcomp4input, but an explicit check is made to ensure there is enough...

A paper by Amit Klein (Trusteer): "OpenBSD DNS Cache Poisoning and Multiple O/S Predictable IP ID Vulnerability"

Hello BugTraq Recently I've been looking at the OpenBSD PRNG implementation for DNS transaction ID OpenBSD ported BIND 9 into their code tree, but rolled their own PRNG for the DNS transaction ID field. I discovered a serious weakness in OpenBSD's PRNG, which allows an attacker to predict the nex...

Debian Security Advisory DSA 551-1 (lukemftpd)

The remote host is missing an update to lukemftpd announced via advisory DSA 551-1. OpenVAS Vulnerability Test $Id: deb5511.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 551-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

CVE-2002-2245

NetBSD ftpd is affected on versions 1.5 through 1.5.3 and 1.6. The issue arises because the FTP server does not properly quote a digit in the response to a STAT command for a filename containing a carriage return followed by a digit, which can cause firewalls and other intermediary devices to los...

CVE-2002-2245

ftpd in NetBSD 1.5 through 1.5.3 and 1.6 does not properly quote a digit in response to a STAT command for a filename that contains a carriage return followed by a digit, which can cause firewalls and other intermediary devices to lose proper track of the FTP session...

Input validation

The display driver allocattr functions in NetBSD 3.0 through 4.0BETA2, and NetBSD-current before 20070728, allow local users to cause a denial of service panic via a 1 negative or 2 large value in an ioctl call, as demonstrated by the vgaallocattr function...

CVE-2007-3654

The display driver allocattr functions in NetBSD 3.0 through 4.0BETA2, and NetBSD-current before 20070728, allow local users to cause a denial of service panic via a 1 negative or 2 large value in an ioctl call, as demonstrated by the vgaallocattr function...

CVE-2007-3654

The display driver allocattr functions in NetBSD 3.0 through 4.0BETA2, and NetBSD-current before 20070728, allow local users to cause a denial of service panic via a 1 negative or 2 large value in an ioctl call, as demonstrated by the vgaallocattr function...

CVE-2007-3654

The CVE-2007-3654 issue affects NetBSD: display driver allocattr functions in NetBSD 3.0 through 4.0_BETA2, and NetBSD-current before 20070728. The root cause is improper validation in an ioctl call within the vga_allocattr path, allowing a local attacker to trigger a denial-of-service (panic) by...

Race condition

Multiple race conditions in the 1 Sudo monitor mode and 2 Sysjail policies in Systrace on NetBSD and OpenBSD allow local users to defeat system call interposition, and consequently bypass access control policy and auditing...

CVE-2007-4305

Multiple race conditions in the 1 Sudo monitor mode and 2 Sysjail policies in Systrace on NetBSD and OpenBSD allow local users to defeat system call interposition, and consequently bypass access control policy and auditing...

CVE-2007-4305

Multiple race conditions in the 1 Sudo monitor mode and 2 Sysjail policies in Systrace on NetBSD and OpenBSD allow local users to defeat system call interposition, and consequently bypass access control policy and auditing...

CVE-2007-4305

CVE-2007-4305 involves multiple race conditions in the Sudo monitor mode and in Sysjail policies of Systrace on NetBSD and OpenBSD. The underlying issue allows local users to defeat system call interposition, thereby bypassing access control policy and auditing. Affected components: NetBSD/OpenBS...

NetBSD reference ISO protocol implementation multiple security vulnerabilities

Buffer overflows in different functions...

Buffer overflow

Multiple buffer overflows in the ISO network protocol support in the NetBSD kernel 2.0 through 4.0BETA2, and NetBSD-current before 20070329, allow local users to execute arbitrary code via long parameters to certain functions, as demonstrated by a long sockaddr structure argument to the clnproute...

CVE-2007-1677

Multiple buffer overflows in the ISO network protocol support in the NetBSD kernel 2.0 through 4.0BETA2, and NetBSD-current before 20070329, allow local users to execute arbitrary code via long parameters to certain functions, as demonstrated by a long sockaddr structure argument to the clnproute...

CVE-2007-1677

Multiple buffer overflows in the ISO network protocol support in the NetBSD kernel 2.0 through 4.0BETA2, and NetBSD-current before 20070329, allow local users to execute arbitrary code via long parameters to certain functions, as demonstrated by a long sockaddr structure argument to the clnproute...

CVE-2007-1677

CVE-2007-1677 affects the NetBSD kernel ISO network protocol support. The vulnerability consists of multiple buffer overflows in the clnp_route-related handling, allowing a local user to execute arbitrary code via overly long sockaddr structures. Impact is local code execution with the same privi...

CVE-2007-1523

Heap-based buffer overflow in the kernel in NetBSD 3.0, certain versions of FreeBSD and OpenBSD, and possibly other BSD derived operating systems allows local users to have an unknown impact. NOTE: this information is based upon a vague pre-advisory with no actionable information. Details will be...

CVE-2007-1523

Technical details for CVE-2007-1523 are not publicly available in the provided documents. Monitor for updates as information remains vague and no concrete impact, affected products, or mitigations are disclosed.