CVE-2005-4783

CVE-2005-4783 concerns NetBSD kernels where kernfs_xread in kernfs_vnops.c fails to check for a negative offset when reading the message buffer. This lack of validation allows local users to read arbitrary kernel memory. The description specifies impact as a local information disclosure, affectin...

CVE-2005-4782

The vulnerability CVE-2005-4782 affects NetBSD 2.0 (before 2.0.4), 2.1 (before 2.1.1), and 3, when the kernel is built with the DIAGNOSTIC option. The issue is a denial of service caused by a kernel assertion panic triggered by a negative linger time in the SO_LINGER socket option. Concretely, lo...

CVE-2005-4782: Undefined Security Weakness

NetBSD 2.0 before 2.0.4, 2.1 before 2.1.1, and 3, when the kernel is compiled with "options DIAGNOSTIC," allows local users to cause a denial of service kernel assertion panic via a negative linger time in the SOLINGER socket option...

CVE-2005-4783: Undefined Security Weakness

kernfsxread in kernfsvnops.c in NetBSD before 20050831 does not check for a negative offset when reading the message buffer, which allows local users to read arbitrary kernel memory...

CVE-2005-4779

CVE-2005-4779 relates to NetBSD 2.0.2, where verifiedexecioctl in verified_exec.c calls NDINIT with UIO_USERSPACE instead of UID_SYSSPACE, removing the verified exec kernel subsystem functionality. This change, as documented, could allow local users to run Trojan horse programs. Multiple sources ...

CVE-2005-4776

CVE-2005-4776 describes an integer overflow in the NetBSD FreeBSD compatibility code (freebsd_misc.c) affecting NetBSD-current, NetBSD-3, NetBSD-2.0, and NetBSD-2 prior to 20050913, and NetBSD-1.6 prior to 20050914. This vulnerability could allow local users to cause a denial of service via heap ...

CVE-2005-4779

verifiedexecioctl in verifiedexec.c in NetBSD 2.0.2 calls NDINIT with UIOUSERSPACE rather than UIDSYSSPACE, which removes the functionality of the verified exec kernel subsystem and might allow local users to execute Trojan horse programs...

CVE-2005-4779: Undefined Security Weakness

verifiedexecioctl in verifiedexec.c in NetBSD 2.0.2 calls NDINIT with UIOUSERSPACE rather than UIDSYSSPACE, which removes the functionality of the verified exec kernel subsystem and might allow local users to execute Trojan horse programs...

[SA19615] NetBSD SIOCGIFALIAS "ioctl()" Denial of Service Vulnerability

TITLE: NetBSD SIOCGIFALIAS "ioctl" Denial of Service Vulnerability SECUNIA ADVISORY ID: SA19615 VERIFY ADVISORY: http://secunia.com/advisories/19615/ CRITICAL: Not critical IMPACT: DoS WHERE: Local system OPERATING SYSTEM: NetBSD 1.x http://secunia.com/product/255/ DESCRIPTION: A vulnerability ha...

Multiple NetBSD security vulnerabilities

RNG generator non-random strem generation, DoS conditions...

[SA19616] NetBSD "sysctl()" Local Denial of Service Vulnerability

TITLE: NetBSD "sysctl" Local Denial of Service Vulnerability SECUNIA ADVISORY ID: SA19616 VERIFY ADVISORY: http://secunia.com/advisories/19616/ CRITICAL: Not critical IMPACT: DoS WHERE: Local system OPERATING SYSTEM: NetBSD 1.x http://secunia.com/product/255/ DESCRIPTION: A vulnerability has been...

[SA19585] NetBSD False Intel Hardware RNG Detection Security Issue

TITLE: NetBSD False Intel Hardware RNG Detection Security Issue SECUNIA ADVISORY ID: SA19585 VERIFY ADVISORY: http://secunia.com/advisories/19585/ CRITICAL: Less critical IMPACT: Security Bypass WHERE: From remote OPERATING SYSTEM: NetBSD 1.x http://secunia.com/product/255/ DESCRIPTION: A securit...

CVE-2005-4776: Undefined Security Weakness

Integer overflow in the FreeBSD compatibility code freebsdmisc.c in NetBSD-current, NetBSD-3, NetBSD-2.0, and NetBSD-2 before 20050913; and NetBSD-1.6 before 20050914; allows local users to cause a denial of service heap corruption or system crash and possibly gain root privileges...

CVE-2006-1646

The CVE-2006-1646 issue concerns the Internet Key Exchange version 1 (IKEv1) implementation (isakmp_agg.c) in the Shoichi Sakane KAME Project racoon, as used by NetBSD, certain FreeBSD releases, and potentially other BSD/Linux distributions. In aggressive mode, remote attackers can trigger a deni...

CVE-2006-1646: Undefined Security Weakness

The Internet Key Exchange version 1 IKEv1 implementation isakmpagg.c in the Shoichi Sakane KAME Project racoon, as used by NetBSD 1.6, 2.x before 20060119, certain FreeBSD releases, and possibly other distributions of BSD or Linux operating systems, when running in aggressive mode, allows remote...

Design/Logic Flaw

The bridge ioctl ifbridge code in NetBSD 1.6 through 3.0 does not clear sensitive memory before copying ioctl results to the requesting process, which allows local users to obtain portions of kernel memory...

Design/Logic Flaw

NetBSD 1.6 up to 3.0, when a user has "set record" in .mailrc with the default umask set, creates the record file with 0644 permissions, which allows local users to read the record file...

Design/Logic Flaw

The elfloadfile function in NetBSD 2.0 through 3.0 allows local users to cause a denial of service kernel crash via an ELF interpreter that does not have a PTLOAD section in its header, which triggers a null dereference...

CVE-2006-1587

NetBSD 1.6 up to 3.0, when a user has "set record" in .mailrc with the default umask set, creates the record file with 0644 permissions, which allows local users to read the record file...

CVE-2006-1588

The bridge ioctl ifbridge code in NetBSD 1.6 through 3.0 does not clear sensitive memory before copying ioctl results to the requesting process, which allows local users to obtain portions of kernel memory...