CVE-2006-5218

The CVE-2006-5218 entry describes an integer overflow in the systrace_preprepl function (STRIOCREPLACE) within the systrace component of OpenBSD 3.9 and NetBSD 3. This vulnerability can be triggered by large numeric arguments to the systrace ioctl, allowing local users to cause a denial of servic...

CVE-2006-5214

Race condition in the Xsession script, as used by X Display Manager xdm in NetBSD before 20060212, X.Org before 20060225, and Solaris 8 through 10 before 20061006, causes a user's Xsession errors file to have weak permissions before a chmod is performed, which allows local users to read Xsession...

CVE-2006-5214

CVE-2006-5214 describes a race condition in the Xsession handling of X Display Manager environments affecting NetBSD, X.Org, and Solaris releases as listed; the root cause is a window between creating the user’s Xsession errors file and applying the chmod, which can let local users read other use...

CVE-2006-5215

The Xsession script, as used by X Display Manager xdm in NetBSD before 20060212, X.Org before 20060317, and Solaris 8 through 10 before 20061006, allows local users to overwrite arbitrary files, or read another user's Xsession errors file, via a symlink attack on a /tmp/xses-$USER file...

CVE-2006-4304

Buffer overflow in the sppp driver in FreeBSD 4.11 through 6.1, NetBSD 2.0 through 4.0 beta before 20060823, and OpenBSD 3.8 and 3.9 before 20060902 allows remote attackers to cause a denial of service panic, obtain sensitive information, and possibly execute arbitrary code via crafted Link Contr...

CVE-2006-4304

Buffer overflow in the sppp driver in FreeBSD 4.11 through 6.1, NetBSD 2.0 through 4.0 beta before 20060823, and OpenBSD 3.8 and 3.9 before 20060902 allows remote attackers to cause a denial of service panic, obtain sensitive information, and possibly execute arbitrary code via crafted Link Contr...

CVE-2006-4304

CVE-2006-4304 describes a buffer overflow in the sppp(4) driver (used with PPP implementations such as pppoe/ippp) on FreeBSD 4.11–6.1, NetBSD 2.0–4.0 beta, and OpenBSD 3.8–3.9. The issue arises while processing LCP configuration options, where option lengths aren’t properly validated, allowing a...

CVE-2006-4304

Buffer overflow in the sppp driver in FreeBSD 4.11 through 6.1, NetBSD 2.0 through 4.0 beta before 20060823, and OpenBSD 3.8 and 3.9 before 20060902 allows remote attackers to cause a denial of service panic, obtain sensitive information, and possibly execute arbitrary code via crafted Link Contr...

CVE-2006-3202

The ip6savecontrol function in NetBSD 2.0 through 3.0, under certain configurations, does not check to see if IPv4-mapped sockets are being used before processing IPv6 socket options, which allows local users to cause a denial of service crash by creating an IPv4-mapped IPv6 socket with the...

CVE-2006-3202

The CVE-2006-3202 entry describes a local-denial-of-service flaw in NetBSD 2.0–3.0: ip6_savecontrol may process IPv6 socket options without validating IPv4‑mapped sockets, enabling a local attacker to crash the system by creating an IPv4‑mapped IPv6 socket, enabling SO_TIMESTAMP, and sending an I...

CVE-2006-3202

The ip6savecontrol function in NetBSD 2.0 through 3.0, under certain configurations, does not check to see if IPv4-mapped sockets are being used before processing IPv6 socket options, which allows local users to cause a denial of service crash by creating an IPv4-mapped IPv6 socket with the...

Code injection

The audiowrite function in NetBSD 3.0 allows local users to cause a denial of service kernel crash by using the audiosetinfo ioctl to change the sample rate of an audio device...

CVE-2006-2205

The audiowrite function in NetBSD 3.0 allows local users to cause a denial of service kernel crash by using the audiosetinfo ioctl to change the sample rate of an audio device...

CVE-2006-2205

The CVE-2006-2205 entry affects NetBSD 3.0, where the audio_write function is exposed to a local-access change via the audiosetinfo ioctl that can alter the sample rate of an audio device. This leads to a local denial-of-service (kernel crash). The provided documents do not specify affected subco...

CVE-2006-2205

The audiowrite function in NetBSD 3.0 allows local users to cause a denial of service kernel crash by using the audiosetinfo ioctl to change the sample rate of an audio device...

Fedora Core 5 : gdm-2.14.1-1.fc5.2 (2006-338)

Notes taken from upstream release mail - The sockets connection between the slaves and the GDM daemon is now better managed to better ensure that sockets are never left open. Brian Cameron - Corrected bug that causes a core dump when you click on gdmgreeter fields that have an id. Brian Cameron -...

Design/Logic Flaw

Intel RNG Driver in NetBSD 1.6 through 3.0 may incorrectly detect the presence of the pchb interface, which will cause it to always generate the same random number, which allows remote attackers to more easily crack encryption keys generated from the interface...

CVE-2006-1833

Intel RNG Driver in NetBSD 1.6 through 3.0 may incorrectly detect the presence of the pchb interface, which will cause it to always generate the same random number, which allows remote attackers to more easily crack encryption keys generated from the interface...

CVE-2006-1833

The CVE-2006-1833 issue affects the Intel RNG Driver in NetBSD 1.6–3.0, where incorrect detection of the pchb interface causes it to generate a constant random value. This predictable output could enable remote attackers to more easily crack encryption keys derived from the RNG. The available con...

CVE-2006-1833

Intel RNG Driver in NetBSD 1.6 through 3.0 may incorrectly detect the presence of the pchb interface, which will cause it to always generate the same random number, which allows remote attackers to more easily crack encryption keys generated from the interface...