53 matches found
FreeBSD Security Advisory (FreeBSD-SA-05:13.ipfw.asc)
The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-05:13.ipfw.asc ADV FreeBSD-SA-05:13.ipfw.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft In...
FreeBSD Security Advisory (FreeBSD-SA-06:04.ipfw.asc)
The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-06:04.ipfw.asc SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Design/Logic Flaw
Untrusted search path vulnerability in Rumpus 5.1 and earlier allows local users to gain privileges via a modified PATH that points to a malicious ipfw program...
CVE-2007-0366
Untrusted search path vulnerability in Rumpus 5.1 and earlier allows local users to gain privileges via a modified PATH that points to a malicious ipfw program...
CVE-2007-0366
Untrusted search path vulnerability in Rumpus 5.1 and earlier allows local users to gain privileges via a modified PATH that points to a malicious ipfw program...
CVE-2007-0366
CVE-2007-0366 affects Rumpus 5.1 and earlier. The issue is an untrusted search path vulnerability where a local user can gain privileges by a modified PATH that points to a malicious ipfw program. The vulnerability is local with low complexity and partial impact on confidentiality, integrity, and...
ypserv -- Inoperative access controls in ypserv
Problem Description There are two documented methods of restricting access to NIS maps through ypserv8: through the use of the /var/yp/securenets file, and through the /etc/hosts.allow file. While both mechanisms are implemented in the server, a change in the build process caused the "securenets"...
Null pointer dereference
The ipfw firewall in FreeBSD 6.0-RELEASE allows remote attackers to cause a denial of service firewall crash via ICMP IP fragments that match a reset, reject or unreach action, which leads to an access of an uninitialized pointer...
CVE-2006-0054
The ipfw firewall in FreeBSD 6.0-RELEASE allows remote attackers to cause a denial of service firewall crash via ICMP IP fragments that match a reset, reject or unreach action, which leads to an access of an uninitialized pointer...
FreeBSD-SA-06:04.ipfw
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-06:04.ipfw Security Advisory The FreeBSD Project Topic: ipfw IP fragment denial of service Category: core Module: ipfw Announced: 2006-01-11 Credits: Oleg Bulyzhi...
[SA18378] FreeBSD ipfw IP Fragment Denial of Service Vulnerability
TITLE: FreeBSD ipfw IP Fragment Denial of Service Vulnerability SECUNIA ADVISORY ID: SA18378 VERIFY ADVISORY: http://secunia.com/advisories/18378/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote OPERATING SYSTEM: FreeBSD 6.x http://secunia.com/product/6778/ DESCRIPTION: A vulnerabili...
CVE-2005-2019
ipfw in FreeBSD 5.4, when running on Symmetric Multi-Processor SMP or Uni Processor UP systems with the PREEMPTION kernel option enabled, does not sufficiently lock certain resources while performing table lookups, which can cause the cache results to be corrupted during multiple concurrent...
CVE-2005-2019
ipfw in FreeBSD 5.4, when running on Symmetric Multi-Processor SMP or Uni Processor UP systems with the PREEMPTION kernel option enabled, does not sufficiently lock certain resources while performing table lookups, which can cause the cache results to be corrupted during multiple concurrent...
CVE-2005-2019
CVE-2005-2019 affects FreeBSD 5.4+ ipfw when running on SMP or UP with PREEMPTION enabled. The issue is an insufficient lock around the tables lookup cache, so concurrent table lookups can corrupt cached results and cause some addresses to be matched incorrectly, potentially bypassing filtering r...
FreeBSD ipfw packet filter race conditions
Because of insuddicient locking it's possible to corrupt cached lookup table on machines with threading PREEMPTIVE multitasking...
FreeBSD Security Advisory FreeBSD-SA-05:13.ipfw
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-05:13.ipfw Security Advisory The FreeBSD Project Topic: ipfw packet matching errors with address tables Category: core Module: netinet Announced: 2005-06-29...
FreeBSD-SA-05:13.ipfw
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-05:13.ipfw Security Advisory The FreeBSD Project Topic: ipfw packet matching errors with address tables Category: core Module: netinet Announced: 2005-06-29...
kernel -- ipfw packet matching errors with address tables
Problem Description The ipfw tables lookup code caches the result of the last query. The kernel may process multiple packets concurrently, performing several concurrent table lookups. Due to an insufficient locking, a cached result can become corrupted that could cause some addresses to be...
[EXPL] IPFW ECE Firewall Bypassing Exploit
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...