CVE-2006-6730

CVE-2006-6730 affects OpenBSD and NetBSD. The vulnerability allows local users to execute code with root privileges by killing the display server and writing to the X.Org /dev/xf86 device to replace the System Management Mode (SMM) handler via an SMRAM write within /dev/xf86 (the video card RAM r...

CVE-2006-6653

The accept function in NetBSD-current before 20061023, NetBSD 3.0 and 3.0.1 before 20061024, and NetBSD 2.x before 20061029 allows local users to cause a denial of service socket consumption via an invalid 1 name or 2 namelen parameter, which may result in the socket never being closed aka "a...

CVE-2006-6654

The sendmsg function in NetBSD-current before 20061023, NetBSD 3.0 and 3.0.1 before 20061024, and NetBSD 2.x before 20061029, when run on a 64-bit architecture, allows attackers to cause a denial of service kernel panic via an invalid msgcontrollen parameter to the sendit function...

CVE-2006-6657

The ifclonelist function in NetBSD-current before 20061027, NetBSD 3.0 and 3.0.1 before 20061027, and NetBSD 2.x before 20061119 allows local users to read potentially sensitive, uninitialized stack memory via unspecified vectors...

CVE-2006-6656

Unspecified vulnerability in ptrace in NetBSD-current before 20061027, NetBSD 3.0 and 3.0.1 before 20061027, and NetBSD 2.x before 20061119 allows local users to read kernel memory and obtain sensitive information via certain manipulations of a PTLWPINFO request, which leads to a memory leak and...

CVE-2006-6655

The procfs implementation in NetBSD-current before 20061023, NetBSD 3.0 and 3.0.1 before 20061024, and NetBSD 2.x before 20061029 allows local users to cause a denial of service kernel panic by attempting to access /emul/linux/proc/0/stat on a procfs filesystem that was mounted with mountprocfs -...

CVE-2006-6652

Buffer overflow in the glob implementation glob.c in libc in NetBSD-current before 20050914, NetBSD 2. and 3. before 20061203, and Apple Mac OS X before 2007-004, as used by the FTP daemon and tnftpd, allows remote authenticated users to execute arbitrary code via a long pathname that results fro...

CVE-2006-6656

Unspecified vulnerability in ptrace in NetBSD-current before 20061027, NetBSD 3.0 and 3.0.1 before 20061027, and NetBSD 2.x before 20061119 allows local users to read kernel memory and obtain sensitive information via certain manipulations of a PTLWPINFO request, which leads to a memory leak and...

CVE-2006-6654

The CVE covers a vulnerability in NetBSD where the sendmsg path on 64-bit architectures can panic the kernel due to an invalid msg_controllen passed to sendit. Affected are NetBSD-current prior to 20061023, NetBSD 3.0 and 3.0.1 prior to 20061024, and NetBSD 2.x prior to 20061029. The issue is a d...

CVE-2006-6653

The accept function in NetBSD-current before 20061023, NetBSD 3.0 and 3.0.1 before 20061024, and NetBSD 2.x before 20061029 allows local users to cause a denial of service socket consumption via an invalid 1 name or 2 namelen parameter, which may result in the socket never being closed aka "a...

CVE-2006-6655

The procfs implementation in NetBSD-current before 20061023, NetBSD 3.0 and 3.0.1 before 20061024, and NetBSD 2.x before 20061029 allows local users to cause a denial of service kernel panic by attempting to access /emul/linux/proc/0/stat on a procfs filesystem that was mounted with mountprocfs -...

CVE-2006-6655

NetBSD procfs vulnerability (CVE-2006-6655): Local users can trigger a kernel panic by reading /emul/linux/proc/0/stat on a procfs mounted with mount_procfs -o linux. A NULL pointer dereference occurs in affected kernels (NetBSD-current before 20061023; NetBSD 3.0/3.0.1 before 20061024; NetBSD 2....

CVE-2006-6657

The CVE-2006-6657 entry describes a local memory disclosure in NetBSD: the if_clone_list function in NetBSD-current before 20061027, NetBSD 3.0 and 3.0.1 before 20061027, and NetBSD 2.x before 20061119 can allow local users to read potentially sensitive, uninitialized stack memory via unspecified...

CVE-2006-6652

CVE-2006-6652 describes a buffer overflow in the glob implementation (glob.c) of libc used by the FTP daemon tnftpd, affecting NetBSD-current (before 20050914), NetBSD 2.* and 3.* before 20061203, and Mac OS X before 2007-004. A long pathname resulting from path expansion can allow remote authent...

CVE-2006-6654

The sendmsg function in NetBSD-current before 20061023, NetBSD 3.0 and 3.0.1 before 20061024, and NetBSD 2.x before 20061029, when run on a 64-bit architecture, allows attackers to cause a denial of service kernel panic via an invalid msgcontrollen parameter to the sendit function...

CVE-2006-6657

The ifclonelist function in NetBSD-current before 20061027, NetBSD 3.0 and 3.0.1 before 20061027, and NetBSD 2.x before 20061119 allows local users to read potentially sensitive, uninitialized stack memory via unspecified vectors...

CVE-2006-6656

CVE-2006-6656 describes an unspecified vulnerability in ptrace on NetBSD targets: NetBSD-current before 20061027, NetBSD 3.0/3.0.1 before 20061027, and NetBSD 2.x before 20061119. The issue allows local users to read kernel memory and obtain sensitive information through manipulations of a PT_LWP...

CVE-2006-6653

The CVE affects NetBSD: the accept function in NetBSD-current before 20061023, NetBSD 3.0 and 3.0.1 before 20061024, and NetBSD 2.x before 20061029 allows local users to cause a denial of service (socket exhaustion) via an invalid (1) name or (2) namelen parameter, which may result in a socket ne...

CVE-2006-6397

Integer overflow in banner/banner.c in FreeBSD, NetBSD, and OpenBSD might allow local users to modify memory via a long banner. NOTE: CVE and multiple third parties dispute this issue. Since banner is not setuid, an exploit would not cross privilege boundaries in normal operations. This issue is...

CVE-2006-6397

Integer overflow in banner/banner.c in FreeBSD, NetBSD, and OpenBSD might allow local users to modify memory via a long banner. NOTE: CVE and multiple third parties dispute this issue. Since banner is not setuid, an exploit would not cross privilege boundaries in normal operations. This issue is...