CVE-1999-0422

The CVE-1999-0422 issue affects NetBSD 1.3.3 where the mount functionality allows local users to execute programs in file systems that have the noexec flag set. Root cause is a problem in mount; impact is local execution of potentially untrusted code within those noexec file systems. Public recor...

CVE-1999-0446

CVE-1999-0446 affects NetBSD 1.3.3 and earlier. A local user can trigger a denial of service by creating an unusual symbolic link with the ln command, exploiting a bug in the VFS subsystem. The connected Red Hat and CVE records corroborate the local DoS impact. The available documents do not spec...

CVE-1999-0367

CVE-1999-0367 affects the NetBSD netstat command, where local users can access kernel memory. The connected Red Hat, EUVD, CVE, and NVD entries reiterate: NetBSD netstat is the affected component; root cause details are not provided in the supplied documents. NVD describes low impact with partial...

CVE-1999-0466

NetBSD 1.3.3 and earlier are affected by CVE-1999-0466 via the SVR4 /dev/wabi special device file, which allows a local user to read or write arbitrary files on the disk associated with that device due to improper access. Connected documents confirm the same description across Red Hat security ad...

CVE-1999-0396

A race condition between the select and accept calls in NetBSD TCP servers allows remote attackers to cause a denial of service...

CVE-1999-0422

In some cases, NetBSD 1.3.3 mount allows local users to execute programs in some file systems that have the "noexec" flag set...

CVE-1999-0367

NetBSD netstat command allows local users to access kernel memory...

CVE-1999-0446

Local users can perform a denial of service in NetBSD 1.3.3 and earlier versions by creating an unusual symbolic link with the ln command, triggering a bug in VFS...

CVE-1999-0466

The SVR4 /dev/wabi special device file in NetBSD 1.3.3 and earlier allows a local user to read or write arbitrary files on the disk associated with that device...

freebsd_DoS.txt

Subject: Local DoS in FreeBSD To: [email protected] -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 This was first posted to the FreeBSD security list on the 9th of August, subsequently discussed on freebsd-stable and freebsd-hackers... no one seems to care, even though it is able to lock u...

bsd_bugs.txt

Subject: serious problem in netbsd/openbsd procfs/fdesc To: [email protected] Greetings. I have found a nasty bug in the fdesc and procfs filesystems included with NetBSD and OpenBSD. Any user with access to a mounted procfs/fdesc filesystem has the ability to cause a kernel panic. The...

netBSD_local_DoS.txt

Subject: Re: NetBSD 1.4.1 local DoS To: [email protected] This does not freeze' the system per se. What it does is tie up all the network resources, and make it impossible to any network I/O even through Unx-domain sockets. Linux is not generally vulnerable to the exploit as posted, becau...

CVE-2000-0489

FreeBSD, NetBSD, and OpenBSD allow an attacker to cause a denial of service by creating a large number of socket pairs using the socketpair function, setting a large buffer size via setsockopt, then writing large buffers...

FreeBSD 5.0 NetBSD 1.4.2 OpenBSD 2.7 - setsockopt() Denial of Service

FreeBSD 5.0 NetBSD 1.4.2 OpenBSD 2.7 - setsockopt Denial of Service // source: https://www.securityfocus.com/bid/622/info A denial of service attack exists that affects FreeBSD, NetBSD and OpenBSD, and potentially other operating systems based in some part on BSD. It is believed that all versions...

FreeBSD 5.0 / NetBSD 1.4.2 / OpenBSD 2.7 - 'setsockopt()' Denial of Service

// source: https://www.securityfocus.com/bid/622/info A denial of service attack exists that affects FreeBSD, NetBSD and OpenBSD, and potentially other operating systems based in some part on BSD. It is believed that all versions of these operating systems are vulnerable. The vulnerability is...

netbsd.symlink-DoS.txt

Date: Tue, 13 Apr 1999 13:09:53 +1000 From: matthew green To: [email protected] Subject: NetBSD Security Advisory 1999-008 -----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 1999-008 ================================= Topic: Kernel hang or panic in name lookup under certain circumstanc...

netbsd.umapfs.txt

Date: Thu, 18 Mar 1999 00:03:40 +1100 From: matthew green To: [email protected] Subject: NetBSD Security Advisory 1999-006 -----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 1999-006 ================================= Topic: Security hole in umapfs Version: NetBSD 1.3.3 and prior;...

netbsd-netstat.txt

Date: Tue, 9 Feb 1999 17:15:23 +1100 From: matthew green To: [email protected] Subject: NetBSD Security Advisory 1999-002 -----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 1999-002 ================================= Topic: Security problem with netstat Version: NetBSD-current from...

netbsd.noexec.txt

Date: Thu, 18 Mar 1999 21:27:39 +1100 From: matthew green To: [email protected] Subject: NetBSD Security Advisory 1999-007 -----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 1999-007 ================================= Topic: noexec mount flag is not properly handled by non-root mount...

irixat.txt

Date: Fri, 3 Jul 1998 22:14:14 +0200 From: "J.A. Gutierrez" Subject: more about 'at' I've tried the trick from NetBSD Security Advisory 1998-004 on an IRIX 6.2 host, and it seems it works too. $ at -f /etc/shadow now + 1 minute - shadow is mailed to user: 'at' is: f 23947 91...