CVE-2004-1002

Integer underflow in pppd in cbcp.c for ppp 2.4.1 allows remote attackers to cause a denial of service daemon crash via a CBCP packet with an invalid length value that causes pppd to access an incorrect memory location...

CVE-2004-1002

Integer underflow in pppd in cbcp.c for ppp 2.4.1 allows remote attackers to cause a denial of service daemon crash via a CBCP packet with an invalid length value that causes pppd to access an incorrect memory location...

CVE-2004-1002

Integer underflow in pppd in cbcp.c for ppp 2.4.1 allows remote attackers to cause a denial of service daemon crash via a CBCP packet with an invalid length value that causes pppd to access an incorrect memory location...

CVE-2004-1002: Integer Underflow (Wrap or Wraparound)

Integer underflow in pppd in cbcp.c for ppp 2.4.1 allows remote attackers to cause a denial of service daemon crash via a CBCP packet with an invalid length value that causes pppd to access an incorrect memory location...

[GLSA-200411-01] ppp: Remote denial of service vulnerability

The remote host is affected by the vulnerability described in GLSA-200411-01 ppp: Remote denial of service vulnerability The pppd server improperly verifies header fields, making it vulnerable to denial of service attacks. Impact An attacker can cause the pppd server to access memory that it isn'...

ppp: No denial of service vulnerability

Background ppp is a Unix implementation of the Point-to-Point Protocol. Description The pppd server improperly verifies header fields, potentially leading to a crash of the pppd process handling the connection. However, since a separate pppd process handles each ppp connection, this would not...

pppd out of bounds memory access, possible DOS

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Subject: pppd remote DOS. +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Product Description: ppp is an implementation of PPP Point-to-Point Protocol for Unix systems...

CVE-2004-0165: Undefined Security Weakness

Format string vulnerability in Point-to-Point Protocol PPP daemon pppd 2.4.0 for Mac OS X 10.3.2 and earlier allows remote attackers to read arbitrary pppd process data, including PAP or CHAP authentication credentials, to gain privileges...

Mac OS X pppd format string vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake, Inc. www.atstake.com Security Advisory Advisory Name: Mac OS X pppd format string vulnerability Release Date: 02/23/2004 Application: pppd 2.4.0 Platform: Mac OS X 10.3.2 and below Severity: Local users are able to retrieve PAP/CHAP credential...

CVE-2002-0824

CVE-2002-0824 affects BSD pppd, where a symlink attack on a file specified as a tty device allows local users to change permissions of arbitrary files. The description states this is a local privilege/subversion of permissions vulnerability, but the connected documents do not provide additional t...

CVE-2002-0824

BSD pppd allows local users to change the permissions of arbitrary files via a symlink attack on a file that is specified as a tty device...

CVE-2002-0824: Improper Link Resolution Before File Access

BSD pppd allows local users to change the permissions of arbitrary files via a symlink attack on a file that is specified as a tty device...

CVE-2002-1500

CVE-2002-1500 describes a buffer overflow in NetBSD 1.4.x–1.6 affecting the programs mrinfo , mtrace , and pppd . The vulnerability arises when handling file descriptor tables that may exceed FD_SETSIZE, leaving these programs to fail or be exploited by local users to gain privileges. The describ...

CVE-2002-1500: Undefined Security Weakness

Buffer overflow in 1 mrinfo, 2 mtrace, and 3 pppd in NetBSD 1.4.x through 1.6 allows local users to gain privileges by executing the programs after filling the file descriptor tables, which produces file descriptors larger than FDSETSIZE, which are not checked by FDSET...

NetBSD Security Advisory 2002-010: symlink race in pppd

-----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 2002-010 ================================= Topic: symlink race in pppd Version: NetBSD-current: source prior to July 31, 2002 NetBSD-1.6 beta: affected NetBSD-1.5.3: affected NetBSD-1.5.2: affected NetBSD-1.5.1: affected NetBSD-1.5:...

NetBSD Security Advisory 2002-014: fd_set overrun in mbone tools and pppd

-----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 2002-014 ================================= Topic: fdset overrun in mbone tools and pppd Version: NetBSD-current: source prior to August 10, 2002 NetBSD 1.6 beta: sources prior to August 11, 2002 NetBSD-1.5.3: affected NetBSD-1.5.2:...

CVE-2002-0827

Vulnerability in pppd on UnixWare 7.1.1 and Open UNIX 8.0.0 allows local users to gain root privileges via 1 ppptalk or 2 ppp, a different vulnerability than CVE-2002-0824...

CVE-2002-0824

BSD pppd allows local users to change the permissions of arbitrary files via a symlink attack on a file that is specified as a tty device...

CVE-2002-0827

CVE-2002-0827 affects pppd on UnixWare 7.1.1 and Open UNIX 8.0.0, enabling local users to gain root privileges via (1) ppptalk or (2) ppp. The description notes this is a different issue from CVE-2002-0824. No remediation or version details are provided in the supplied documents; exploitation sta...

CVE-2002-0827

Vulnerability in pppd on UnixWare 7.1.1 and Open UNIX 8.0.0 allows local users to gain root privileges via 1 ppptalk or 2 ppp, a different vulnerability than CVE-2002-0824...