EUVD-2007-1671

Malware in sbrugna...

Buffer overflow

Multiple buffer overflows in the ISO network protocol support in the NetBSD kernel 2.0 through 4.0BETA2, and NetBSD-current before 20070329, allow local users to execute arbitrary code via long parameters to certain functions, as demonstrated by a long sockaddr structure argument to the clnproute...

CVE-2007-1677

CVE-2007-1677 affects the NetBSD kernel ISO network protocol support. The vulnerability consists of multiple buffer overflows in the clnp_route-related handling, allowing a local user to execute arbitrary code via overly long sockaddr structures. Impact is local code execution with the same privi...