Low: Red Hat Security Advisory: openssh security update

Updated openssh packages that fix a potential security vulnerability and various other bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. OpenSSH is OpenBSD's SSH Secure SHell protocol implementation. This includes the core file...

[Full-disclosure] Server crash and motd deletion in MultiTheftAuto 0.5 patch 1

Luigi Auriemma Application: MultiTheftAuto http://www.multitheftauto.com Versions: = 0.5 patch 1 Platforms: Windows, Linux, FreeBSD and OpenBSD Bugs: A anyone can modify the motd B Windows server crash Exploitation: remote, versus server Date: 25 Sep 2005 Author: Luigi Auriemma e-mail:...

Snort 2.4.0 - SACK TCP Option Error Handling Denial of Service

Snort 2.4.0 - SACK TCP Option Error Handling Denial of Service /------------------------------------------ ||------+ Snort thsum es 0 cero, por lo tanto, el primer Router por donde pase este paquete lo descartara por no tener una checksum valida. RFC 1072 - TCP Extensions for Long-Delay Paths 3.2...

Snort 2.4.0 - SACK TCP Option Error Handling Denial of Service

/------------------------------------------ ||------+ Snort thsum es 0 cero, por lo tanto, el primer Router por donde pase este paquete lo descartara por no tener una checksum valida. RFC 1072 - TCP Extensions for Long-Delay Paths 3.2- TCP SACK Option: ... Kind: 5 Length: Variable...

CVE-2004-2338

OpenBSD 3.3 and 3.4 contain a parsing issue in access control rules (Accept/Deny) for big-endian 64-bit platforms such as SPARC64 when rules lack netmasks. This can allow remote attackers to bypass access restrictions. The CVE description consistently notes the condition and affected OS versions;...

CVE-2004-2338

OpenBSD 3.3 and 3.4 does not properly parse Accept and Deny rules without netmasks on big-endian 64-bit platforms such as SPARC64, which may allow remote attackers to bypass access restrictions...

CVE-2004-2338: Undefined Security Weakness

OpenBSD 3.3 and 3.4 does not properly parse Accept and Deny rules without netmasks on big-endian 64-bit platforms such as SPARC64, which may allow remote attackers to bypass access restrictions...

CVE-2002-2092

CVE-2002-2092 describes a race condition in exec on OpenBSD ≤4.0, NetBSD ≤1.5.2, and FreeBSD ≤4.4 that lets local users gain privileges by attaching a debugger to a process before the kernel has confirmed setuid/setgid. The core issue is a window where privilege elevation can occur prior to prope...

CVE-2002-2092: Undefined Security Weakness

Race condition in exec in OpenBSD 4.0 and earlier, NetBSD 1.5.2 and earlier, and FreeBSD 4.4 and earlier allows local users to gain privileges by attaching a debugger to a process before the kernel has determined that the process is setuid or setgid...

CVE-2004-2230

CVE-2004-2230 : Heap-based buffer overflow in isakmpd on OpenBSD 3.4–3.6 allows local users to trigger a denial of service (panic) and memory corruption via IPSEC credentials on a socket. Affected software: OpenBSD’s isakmpd (versions 3.4–3.6). Root cause: heap-based overflow in handling IPSEC cr...

CVE-2004-2230

Heap-based buffer overflow in isakmpd on OpenBSD 3.4 through 3.6 allows local users to cause a denial of service panic and corrupt memory via IPSEC credentials on a socket...

CVE-2004-2230: Undefined Security Weakness

Heap-based buffer overflow in isakmpd on OpenBSD 3.4 through 3.6 allows local users to cause a denial of service panic and corrupt memory via IPSEC credentials on a socket...

CVE-2001-1559

The uipc system calls uipcsyscalls.c in OpenBSD 2.9 and 3.0 provide user mode return instead of versus rval kernel mode values to the fdrelease function, which allows local users to cause a denial of service and trigger a null dereference...

CVE-2001-1559

The CVE-2001-1559 issue affects OpenBSD 2.9 and 3.0, where the uipc_syscalls.c logic returns user-mode values to the fdrelease kernel function, enabling local users to trigger a denial of service and a null dereference. The root cause is the mismatched value returned by uipc system calls to a ker...

CVE-2001-1559: NULL Pointer Dereference

The uipc system calls uipcsyscalls.c in OpenBSD 2.9 and 3.0 provide user mode return instead of versus rval kernel mode values to the fdrelease function, which allows local users to cause a denial of service and trigger a null dereference...

CVE-2004-2163

OpenBSD 3.2 and 3.5 (login_radius) are affected. The issue is that the shared secret is not verified in a RADIUS response, allowing remote attackers to bypass authentication by spoofing server replies. Root cause: failure to verify the shared secret in responses. Affected component: login_radius ...

CVE-2004-2163

loginradius on OpenBSD 3.2, 3.5, and possibly other versions does not verify the shared secret in a response packet from a RADIUS server, which allows remote attackers to bypass authentication by spoofing server replies...

CVE-2004-2163: Undefined Security Weakness

loginradius on OpenBSD 3.2, 3.5, and possibly other versions does not verify the shared secret in a response packet from a RADIUS server, which allows remote attackers to bypass authentication by spoofing server replies...

Feature: OpenBSD Hackathon 2005, Part III

One new attendee of this year's OpenBSD hackathon was Fernando Gont, a diverse individual from Argentina whose current job titles include teacher, technical writer, system administrator and network researcher. His presence at the hackathon was the result of an internet-draft he wrote about some...

Sudo 1.3.1 - 1.6.8p Pathname Validation Local Root Exploit (openbsd)

Exploit for bsd platform in category local exploits ==================================================================== Sudo 1.3.1 - 1.6.8p Pathname Validation Local Root Exploit openbsd ==================================================================== include include include include include...