1726 matches found
CVE-2008-1148
CVE-2008-1148 concerns a flaw in a PRNG using ADD with 0 random hops (Algorithm A0) that affects OpenBSD 3.5–4.2 and NetBSD 1.6.2–4.0. Attackers can observe a sequence of previously generated values to guess sensitive identifiers such as DNS transaction IDs and IP fragmentation IDs, enabling pote...
*BSD user-ppp local root (when conditions permit)
// / pppx.conf - Point to Point Protocol a.k.a. user-ppp exploit by sipher / / 2003 / 12 /23 - PRIVATE CODE / / Program terminated with signal 11, Segmentation fault. / / 0 0xbeefdead in ?? / // I just tested this on FreeBSD 6.3. This bug was discovered on NetBSD. It also works on OpenBSD...
BSD PPP pppx.conf - Local Denial of Service
BSD PPP pppx.conf - Local Denial of Service source: https://www.securityfocus.com/bid/28090/info BSD PPP is prone to a local denial-of-service vulnerability because it fails to perform adequate boundary checks on user-supplied input. Attackers can leverage this issue to crash the application and...
BSD PPP 'pppx.conf' - Local Denial of Service
source: https://www.securityfocus.com/bid/28090/info BSD PPP is prone to a local denial-of-service vulnerability because it fails to perform adequate boundary checks on user-supplied input. Attackers can leverage this issue to crash the application and deny service to legitimate users. Given the...
Information disclosure
The tcprespond function in netinet/tcpsubr.c in OpenBSD 4.1 and 4.2 allows attackers to cause a denial of service panic via crafted TCP packets. NOTE: some of these details are obtained from third party information...
CVE-2008-1057
The ip6checkrh0hdr function in netinet6/ip6input.c in OpenBSD 4.2 allows attackers to cause a denial of service panic via malformed IPv6 routing headers...
CVE-2008-1058
The tcprespond function in netinet/tcpsubr.c in OpenBSD 4.1 and 4.2 allows attackers to cause a denial of service panic via crafted TCP packets. NOTE: some of these details are obtained from third party information...
Design/Logic Flaw
The ip6checkrh0hdr function in netinet6/ip6input.c in OpenBSD 4.2 allows attackers to cause a denial of service panic via malformed IPv6 routing headers...
CVE-2008-1058
The tcprespond function in netinet/tcpsubr.c in OpenBSD 4.1 and 4.2 allows attackers to cause a denial of service panic via crafted TCP packets. NOTE: some of these details are obtained from third party information...
CVE-2008-1057
CVE-2008-1057 describes a vulnerability in OpenBSD 4.2 where the function ip6_check_rh0hdr in netinet6/ip6_input.c is vulnerable to malformed IPv6 routing headers, allowing an attacker to cause a denial of service (panic). The affected component is IPv6 input processing; the underlying issue is t...
CVE-2008-1057
The ip6checkrh0hdr function in netinet6/ip6input.c in OpenBSD 4.2 allows attackers to cause a denial of service panic via malformed IPv6 routing headers...
CVE-2008-1058
The CVE-2008-1058 entry concerns the OpenBSD tcp_respond function in netinet/tcp_subr.c (OpenBSD 4.1/4.2). The vulnerability allows a denial-of-service (panic) via crafted TCP packets. Connected documents confirm the affected component and impact but do not provide exploitation details, specific ...
OpenBSD多个远程拒绝服务漏洞
BUGTRAQ ID: 27965,27949 OpenBSD是一款开放源代码Unix类操作系统。 OpenBSD处理畸形的IPv6数据时存在漏洞，远程攻击者可能利用此漏洞导致内核忙碌。 OpenBSD的sys/netinet6/ip6input.c文件中的ip6checkrh0hdr函数中的错误允许远程攻击者通过畸形的IPv6路由头导致内核忙碌；sys/netinet/tcpsubr.c文件的tcprespond函数中的错误允许远程攻击者通过发送特制的TCP报文导致内核忙碌。 OpenBSD OpenBSD 4.2 OpenBSD OpenBSD 4.1 厂商补丁： OpenBSD...
A paper by Amit Klein (Trusteer): "OpenBSD DNS Cache Poisoning and Multiple O/S Predictable IP ID Vulnerability"
Hello BugTraq Recently I've been looking at the OpenBSD PRNG implementation for DNS transaction ID OpenBSD ported BIND 9 into their code tree, but rolled their own PRNG for the DNS transaction ID field. I discovered a serious weakness in OpenBSD's PRNG, which allows an attacker to predict the nex...
CVE-2007-6700
Cross-site scripting XSS vulnerability in cgi-bin/bgplg in the web interface for the BGPD daemon in OpenBSD 4.1 allows remote attackers to inject arbitrary web script or HTML via the cmd parameter...
CVE-2007-6700
Cross-site scripting XSS vulnerability in cgi-bin/bgplg in the web interface for the BGPD daemon in OpenBSD 4.1 allows remote attackers to inject arbitrary web script or HTML via the cmd parameter...
CVE-2007-6700
The CVE-2007-6700 entry describes a Cross-site Scripting (XSS) vulnerability in the cgi-bin/bgplg component of the OpenBSD 4.1 BGPD web interface. Remote attackers could inject arbitrary web script or HTML through the cmd parameter. Affected software is OpenBSD 4.1’s BGPD with the web interface c...
CVE-2007-6700
Cross-site scripting XSS vulnerability in cgi-bin/bgplg in the web interface for the BGPD daemon in OpenBSD 4.1 allows remote attackers to inject arbitrary web script or HTML via the cmd parameter...
DSECRG-08-007.txt
DSECRG-08-007 Digital Security Research Group DSecRG Advisory Application: OpenBSD BGPD daemon Versions Affected: OpenBSD 4.1 Vendor URL: http://openbsd.org Bugs: XSS Exploits: YES Reported: 10.10.2007 Vendor response: 10.10.2007 Date of Public Advisory: 31.01.2008 Authors: Alexandr Polyakov, Ant...