FreeBSD 5.0 / NetBSD 1.4.2 / OpenBSD 2.7 - 'setsockopt()' Denial of Service

// source: https://www.securityfocus.com/bid/622/info A denial of service attack exists that affects FreeBSD, NetBSD and OpenBSD, and potentially other operating systems based in some part on BSD. It is believed that all versions of these operating systems are vulnerable. The vulnerability is...

bootpd.txt

Hi, I've discovered a remote buffer overflow in the bootpd daemon that, to my knowledge, is distributed with most linuxs and bsds. However, due to the characteristics of the vulnerability, a good portion of the operating systems with the bug are probably not vulnerable to a remote code execution...

openbsdreadv.txt

Date: Mon, 27 Jul 1998 12:26:36 +0100 BST From: [email protected] To: [email protected] X-Send-Pr-Version: 3.97 Subject: kernel/549: Any user can panic OpenBSD machine Sender: [email protected] Number: 549 Category: kernel Synopsis: readv with -ve block size panics kernel Confidential: yes...

ipfilter.3.2.10.txt

Date: Thu, 15 Apr 1999 17:56:02 +0000 From: 0x1c To: [email protected] Subject: FSA-99.04-IPFILTER-v3.2.10 The author Darren Reed was notified about this problem early April. I believe it has been fixed in the latest version. FERALMONKEY SECURITY ADVISORY - IPFILTER v3.2.10 Title:...

wide-dhcp.txt

http://www.rootshell.com/ From [email protected] Fri Jul 17 12:47:17 1998 Date: Fri, 17 Jul 1998 19:52:31 +0700 NOVST From: Oleg Safiullin To: [email protected] Subject: wide-dhcp security hole Bug found in OpenBSD port of wide-dhcp /created by me :-/. WIDE DHCP server creates...

CVE-1999-0724

Buffer overflow in OpenBSD procfs and fdescfs file systems via uiooffset in the readdir function...

CVE-1999-0727

A kernel leak in the OpenBSD kernel allows IPsec packets to be sent unencrypted...

CVE-1999-0703

OpenBSD, BSDI, and other Unix operating systems allow users to set chflags and fchflags on character and block devices...

CVE-1999-0481

Denial of service in "poll" in OpenBSD...

CVE-1999-0482

OpenBSD kernel crash through TSS handling, as caused by the crashme program...

CVE-1999-0483

OpenBSD crash using nlink value in FFS and EXT2FS filesystems...

CVE-1999-0484

Buffer overflow in OpenBSD ping...

CVE-1999-0485

Remote attackers can cause a system crash through ipintr in ipq in OpenBSD...

CVE-1999-0798

Buffer overflow in bootpd on OpenBSD, FreeBSD, and Linux systems via a malformed header type...

CVE-1999-0062

The chpass command in OpenBSD allows a local user to gain root access through file descriptor leakage...

BSD lpr 2000.05.070.480.72 lpr-ppd 0.72 - Local Buffer Overflow (2)

BSD lpr 2000.05.070.480.72 lpr-ppd 0.72 - Local Buffer Overflow 2 // source: https://www.securityfocus.com/bid/7025/info It has been reported that a vulnerability in the handling of some types of requests exists in lprm. When an attacker sends a maliciously crafted string to a configured printer...

BSD 'lpr' 2000.05.07/0.48/0.72 / lpr-ppd 0.72 - Local Buffer Overflow (1)

// source: https://www.securityfocus.com/bid/7025/info It has been reported that a vulnerability in the handling of some types of requests exists in lprm. When an attacker sends a maliciously crafted string to a configured printer through the lprm command, it may be possible to execute code. /...

BSD 'lpr' 2000.05.07/0.48/0.72 / lpr-ppd 0.72 - Local Buffer Overflow (2)

// source: https://www.securityfocus.com/bid/7025/info It has been reported that a vulnerability in the handling of some types of requests exists in lprm. When an attacker sends a maliciously crafted string to a configured printer through the lprm command, it may be possible to execute code. /...