1085 matches found
NetBSD Security Advisory 2004-009: ftpd root escalation
-----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 2004-009 ================================= Topic: ftpd root escalation Version: NetBSD-current: source prior to Aug 10, 2004 NetBSD 2.0 branch: source prior to Aug 15, 2004 NetBSD 1.6.2: affected NetBSD 1.6.1: affected NetBSD 1.6: affect...
NetBSD swapctl DoS
No description provided...
[Full-Disclosure] NetBSD kernel swapctl(2) vulnerability
Name: NetBSD kernel swapctl2 vulnerability Date: 11 June 2004 CVE candidate: not assigned Author: Evgeny Demidov Description: There exists a integer handling vulnerability in NetBSD swapctl2 system call. It seems that this vulnerability can not be exploited to gain super-user privilegies, but any...
TCP RST packets spoofing
By sending spoofed RST it's possible to terminate established TCP connection. unlike TPC hijacking attacks there is no need for exact TCP sequence number, and number can be any number from handshaked TCP window. It significantly increases attack efficiency. In NetBSD sequence number for RST is no...
NetBSD systrace privilege escalation
By using invalid handling of error condition it's possible to obtain superuser privileges...
NetBSD Security Advisory 2004-007: Systrace systrace_exit() local root
-----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 2004-007 ================================= Topic: Systrace systraceexit local root Version: NetBSD-current: source prior to Apr 16, 2004 netBSD 2.0 branch: source prior to Apr 16, 2004 netBSD 1.6.2: not affected NetBSD 1.6.1: not affecte...
NetBSDFreeBSD Port Systrace 1.x - Exit Routine Access Validation Privilege Escalation
NetBSDFreeBSD Port Systrace 1.x - Exit Routine Access Validation Privilege Escalation // source: https://www.securityfocus.com/bid/10320/info A vulnerability has been reported that affects Systrace on NetBSD, as well as the FreeBSD port by Vladimir Kotal. The source of the issue is insufficient...
NetBSD/FreeBSD Port Systrace 1.x - Exit Routine Access Validation Privilege Escalation
// source: https://www.securityfocus.com/bid/10320/info A vulnerability has been reported that affects Systrace on NetBSD, as well as the FreeBSD port by Vladimir Kotal. The source of the issue is insufficient access validation when a systraced process is restoring privileges. This issue can be...
[Full-Disclosure] Advisory 04/2004: Net(Free)BSD Systrace local root vulnerabilitiy
e-matters GmbH www.e-matters.de -= Security Advisory =- Advisory: NetFreeBSD Systrace local root vulnerability Release Date: 2004/05/11 Last Modified: 2004/05/11 Author: Stefan Esser [email protected] Application: NetBSD with systrace support before 2004/04/09 FreeBSD with unofficial port by...
NetBSD Security Advisory 2004-006: TCP protocol and implementation vulnerability
-----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 2004-006 ================================= Topic: TCP protocol and implementation vulnerability Version: NetBSD-current: source prior to April 22, 2004 NetBSD 2.0: branch affected, release will include the fix NetBSD 1.6.2: affected NetB...
NetBSD Security Advisory 2004-005: Denial of service vulnerabilities in OpenSSL
-----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 2004-005 ================================= Topic: Denial of service vulnerabilities in OpenSSL Version: NetBSD-current: source prior to March 22, 2004 NetBSD 2.0: branch unaffected, release will include the fix NetBSD 1.6.2: affected...
[PINE-CERT-20040201] reference count overflow in shmat()
------------------------------------------------------------------------------- Pine Digital Security Advisory ------------------------------------------------------------------------------- Advisory ID : PINE-CERT-20040201 CAN-2004-0114 Authors : Joost Pol Vendor Informed : 2004-02-01 Issue date...
Multiple NetBSD bugs
DoS, kernel memory reading...
NetBSD Security Advisory 2003-013: Kernel memory disclosure via ibcs2
-----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 2003-013 ================================= Topic: Kernel memory disclosure via ibcs2 Version: NetBSD-current: source prior to August 7, 2002 NetBSD 1.6.1: not affected NetBSD 1.6: not affected NetBSD-1.5.3: affected NetBSD-1.5.2: affecte...
NetBSD Security Advisory 2003-014: Insufficient argument checking in sysctl(2)
-----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 2003-014 ================================= Topic: Insufficient argument checking in sysctl2 Version: NetBSD-current: source prior to August 25, 2003 NetBSD 1.6.1: affected NetBSD 1.6: affected NetBSD-1.5.3: affected NetBSD-1.5.2: affecte...
CVE-2003-0653
The OSI networking kernel sys/netiso in NetBSD 1.6.1 and earlier does not use a BSD-required "PKTHDR" mbuf when sending certain error responses to the sender of an OSI packet, which allows remote attackers to cause a denial of service kernel panic or crash via certain OSI packets...
CVE-2003-0653
CVE-2003-0653 affects NetBSD 1.6.1 and earlier in the OSI networking kernel (sys/netiso). The vulnerability stems from not using a BSD-required PKTHDR mbuf when sending certain error responses to the sender of an OSI packet, which allows remote attackers to cause a denial of service (kernel panic...
CVE-2003-0653
The OSI networking kernel sys/netiso in NetBSD 1.6.1 and earlier does not use a BSD-required "PKTHDR" mbuf when sending certain error responses to the sender of an OSI packet, which allows remote attackers to cause a denial of service kernel panic or crash via certain OSI packets...
NetBSD Security Advisory 2003-010: remote panic in OSI networking code
-----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 2003-010 ================================= Topic: remote panic in OSI networking code Version: NetBSD-current: source prior to May 26, 2003 NetBSD 1.6.1: affected NetBSD 1.6: affected NetBSD-1.5.3: affected NetBSD-1.5.2: affected...