Linux news 4.12.00

Ядро 2.4.0-test12-pre4 Linus выпустил очередное pre ядро следующего тестового 2.4.0. В нем он добавил патчи от Alan'а Cox'a, включил патч от Stephen Tweedie, исправляющий ошибки в инодах и наложил еще несколько патчей от различных разработчиков ... Подробнее: http://www.kernel.org OpenBSD 2.8 is...

CVE-2000-0999

Technical details about CVE-2000-0999 are not provided in the connected documents. The initial description mentions format-string vulnerabilities in OpenBSD ssh but no affected versions, impact specifics, or remediation are given here. Monitor for updates.

CVE-2000-0997

Format string vulnerabilities in eeprom program in OpenBSD, NetBSD, and possibly other operating systems allows local attackers to gain root privileges...

CVE-2000-0997

CVE-2000-0997 describes a format-string vulnerability in the eeprom program used by OpenBSD and NetBSD (and possibly others), allowing a local attacker to gain root privileges. The root cause is a format-string flaw in the eeprom utility, enabling privilege escalation on affected systems. A patch...

CVE-2000-0999

Format string vulnerabilities in OpenBSD ssh program and possibly other BSD-based operating systems allow attackers to gain root privileges...

CVE-2000-0999: Undefined Security Weakness

Format string vulnerabilities in OpenBSD ssh program and possibly other BSD-based operating systems allow attackers to gain root privileges...

Linux news 29.11.00

Linux kernel 2.4.0-test12-pre3 is out Вышла новая пре версия тестового ядра линукс 2.4.0-test12-pre3. На этот раз Проведена синхронизация с маинтайнером mps64 ветки. Так же изменения в VM, больше нет никакх проблем с исполозованием PageDirty и kiobuf'ов Подробнее:...

OpenBSD Exploit

HP2 advisory HP2 advisory HP2 advisory HP2 advisory HP2 advisory - | | | www.hackphreak.org | | | | Version : Hackphreak advisory 2 of many | | Author : RLoxleyhackphreak / condemnation / EHAP / RSH / ZSH soon| | Contributed : All of Team Hackphreak thanks alot & SSG | | Topic : A non-privledged...

Локальная дырка в OpenBSD

Ошибка в ядре системы позволяет "уронить" систему в режим отладки ядра, в котором можно проделывать любые действия...

Format string vulnerability in libutil pw_error(3) function

Overview There is an input validation vulnerability in the OpenBSD libutil system library that allows local users to gain superuser access via the chpass utility. Description On June 30, 2000, the OpenBSD development team repaired an input validation vulnerability in the pwerror function of the...

CVE-2000-0489

FreeBSD, NetBSD, and OpenBSD allow an attacker to cause a denial of service by creating a large number of socket pairs using the socketpair function, setting a large buffer size via setsockopt, then writing large buffers...

CVE-2000-0489

Technical details are not publicly available in the provided connected documents. Monitor for updates; no exposed exploit details, affected versions, or root-cause specifics are supplied here.

CVE-2000-0489: Undefined Security Weakness

FreeBSD, NetBSD, and OpenBSD allow an attacker to cause a denial of service by creating a large number of socket pairs using the socketpair function, setting a large buffer size via setsockopt, then writing large buffers...

DoS против OpenBSD

Система падает при большом числе ARP-запросов в секунду...

obsd_fun.c

"hello hello obsd team. my obsd box panics every few seconds. what the hell is wrong?" "oh ? really ? hmm...out of space in kmemmap ?" "YES. you know about this bug ?" "yes. some kiddo is running a DoS against your box. we fixed it in 2.7. the kernel runs out of memory if you flood it with...

Re: OpenBSD Security Advisory

Hi, Here is another exploit for an application fstat that OpenBSD's format string audit has seemingly forgotten about. What I would like to know is why this and a number of other privileged applications have security vulnerabilities in them. They WERE fixed, but NO ADVISORY nor ANY MENTION IN THE...

OpenBSD 2.x - Pending ARP Request Remote Denial of Service

// source: https://www.securityfocus.com/bid/1759/info OpenBSD is vulnerable to a remotely exploitable denial of service condition. The problem seems to be a lack of limits on the storage of pending arp requests, and a failure to handle the condition of too many. If an attacker somehow causes a...

OpenBSD 2.x - Pending ARP Request Remote Denial of Service

OpenBSD 2.x - Pending ARP Request Remote Denial of Service // source: https://www.securityfocus.com/bid/1759/info OpenBSD is vulnerable to a remotely exploitable denial of service condition. The problem seems to be a lack of limits on the storage of pending arp requests, and a failure to handle t...

Дырка в OpenBSD (fstat, talkd)

Ошибки форматной строки...

OpenBSD 2.x - fstat Format String

OpenBSD 2.x - fstat Format String // source: https://www.securityfocus.com/bid/1746/info fstat is a program shipped with BSD unix variants that is used to list the open files on a system. It is installed sgid kmem so it can access information about open files from the kernel memory structures. A...