CVE-2008-1058

The CVE-2008-1058 entry concerns the OpenBSD tcp_respond function in netinet/tcp_subr.c (OpenBSD 4.1/4.2). The vulnerability allows a denial-of-service (panic) via crafted TCP packets. Connected documents confirm the affected component and impact but do not provide exploitation details, specific ...

CVE-2008-1057

The ip6checkrh0hdr function in netinet6/ip6input.c in OpenBSD 4.2 allows attackers to cause a denial of service panic via malformed IPv6 routing headers...

CVE-2008-1057: Undefined Security Weakness

The ip6checkrh0hdr function in netinet6/ip6input.c in OpenBSD 4.2 allows attackers to cause a denial of service panic via malformed IPv6 routing headers...

CVE-2008-1058: Undefined Security Weakness

The tcprespond function in netinet/tcpsubr.c in OpenBSD 4.1 and 4.2 allows attackers to cause a denial of service panic via crafted TCP packets. NOTE: some of these details are obtained from third party information...

OpenBSD多个远程拒绝服务漏洞

BUGTRAQ ID: 27965,27949 OpenBSD是一款开放源代码Unix类操作系统。 OpenBSD处理畸形的IPv6数据时存在漏洞，远程攻击者可能利用此漏洞导致内核忙碌。 OpenBSD的sys/netinet6/ip6input.c文件中的ip6checkrh0hdr函数中的错误允许远程攻击者通过畸形的IPv6路由头导致内核忙碌；sys/netinet/tcpsubr.c文件的tcprespond函数中的错误允许远程攻击者通过发送特制的TCP报文导致内核忙碌。 OpenBSD OpenBSD 4.2 OpenBSD OpenBSD 4.1 厂商补丁： OpenBSD...

A paper by Amit Klein (Trusteer): "OpenBSD DNS Cache Poisoning and Multiple O/S Predictable IP ID Vulnerability"

Hello BugTraq Recently I've been looking at the OpenBSD PRNG implementation for DNS transaction ID OpenBSD ported BIND 9 into their code tree, but rolled their own PRNG for the DNS transaction ID field. I discovered a serious weakness in OpenBSD's PRNG, which allows an attacker to predict the nex...

CVE-2007-6700

Cross-site scripting XSS vulnerability in cgi-bin/bgplg in the web interface for the BGPD daemon in OpenBSD 4.1 allows remote attackers to inject arbitrary web script or HTML via the cmd parameter...

CVE-2007-6700

Cross-site scripting XSS vulnerability in cgi-bin/bgplg in the web interface for the BGPD daemon in OpenBSD 4.1 allows remote attackers to inject arbitrary web script or HTML via the cmd parameter...

CVE-2007-6700

Cross-site scripting XSS vulnerability in cgi-bin/bgplg in the web interface for the BGPD daemon in OpenBSD 4.1 allows remote attackers to inject arbitrary web script or HTML via the cmd parameter...

CVE-2007-6700

The CVE-2007-6700 entry describes a Cross-site Scripting (XSS) vulnerability in the cgi-bin/bgplg component of the OpenBSD 4.1 BGPD web interface. Remote attackers could inject arbitrary web script or HTML through the cmd parameter. Affected software is OpenBSD 4.1’s BGPD with the web interface c...

CVE-2007-6700: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in cgi-bin/bgplg in the web interface for the BGPD daemon in OpenBSD 4.1 allows remote attackers to inject arbitrary web script or HTML via the cmd parameter...

DSECRG-08-007.txt

DSECRG-08-007 Digital Security Research Group DSecRG Advisory Application: OpenBSD BGPD daemon Versions Affected: OpenBSD 4.1 Vendor URL: http://openbsd.org Bugs: XSS Exploits: YES Reported: 10.10.2007 Vendor response: 10.10.2007 Date of Public Advisory: 31.01.2008 Authors: Alexandr Polyakov, Ant...

OpenBSD BGP daemon crossite scripting

Web-interface crossite scripting...

[DSECRG-08-007] OpenBSD BGPD daemon Web Interface XSS.

DSECRG-08-007 Digital Security Research Group DSecRG Advisory Application: OpenBSD BGPD daemon Versions Affected: OpenBSD 4.1 Vendor URL: http://openbsd.org Bugs: XSS Exploits: YES Reported: 10.10.2007 Vendor response: 10.10.2007 Date of Public Advisory: 31.01.2008 Authors: Alexandr Polyakov, Ant...

Null pointer dereference

OpenBSD 4.2 allows local users to cause a denial of service kernel panic by calling the SIOCGIFRTLABEL IOCTL on an interface that does not have a route label, which triggers a NULL pointer dereference when the return value from the rtlabelid2name function is not checked...

CVE-2008-0384

OpenBSD 4.2 allows local users to cause a denial of service kernel panic by calling the SIOCGIFRTLABEL IOCTL on an interface that does not have a route label, which triggers a NULL pointer dereference when the return value from the rtlabelid2name function is not checked...

CVE-2008-0384

OpenBSD 4.2 is affected. Local users can cause a kernel panic by invoking the SIOCGIFRTLABEL IOCTL on an interface without a route label, triggering a NULL pointer dereference when the return value from rtlabel_id2name isn’t checked. The concrete root cause is an unchecked rtlabel_id2name result ...

CVE-2008-0384

OpenBSD 4.2 allows local users to cause a denial of service kernel panic by calling the SIOCGIFRTLABEL IOCTL on an interface that does not have a route label, which triggers a NULL pointer dereference when the return value from the rtlabelid2name function is not checked...

CVE-2008-0384: Undefined Security Weakness

OpenBSD 4.2 allows local users to cause a denial of service kernel panic by calling the SIOCGIFRTLABEL IOCTL on an interface that does not have a route label, which triggers a NULL pointer dereference when the return value from the rtlabelid2name function is not checked...

openbsd-deref.txt

/ OpenBSD 4.2 rtlabelid2name SIOCGIFRTLABEL ioctl Null Pointer Dereference local Denial of Service Exploit by Hunger Advisory: http://marc.info/?l=openbsd-security-announce&m=120007327504064 FOR TESTING PURPOSES ONLY! $ uname -mrsv OpenBSD 4.2 GENERIC375 i386 $ id uid=1000hunger gid=1000hunger...