CVE-2006-1814

NetBSD 1.6, 2.0, 2.1 and 3.0 allows local users to cause a denial of service memory exhaustion by using the sysctl system call to lock a large buffer into physical memory...

CVE-2006-1797

The CVE-2006-1797 entry describes a local denial-of-service in NetBSD-current kernels released before 28 September 2005. A local attacker can trigger a NULL pointer dereference by issuing the SIOCGIFALIAS ioctl to query information about a non-existent network alias, causing a system crash. The a...

CVE-2006-1814

CVE-2006-1814 affects NetBSD 1.6, 2.0, 2.1 and 3.0. Local users can cause a denial of service (memory exhaustion) by using the sysctl system call to lock a large buffer into physical memory. The connected documents provide the affected versions and the underlying cause (locking a large buffer via...

CVE-2005-4782

The vulnerability CVE-2005-4782 affects NetBSD 2.0 (before 2.0.4), 2.1 (before 2.1.1), and 3, when the kernel is built with the DIAGNOSTIC option. The issue is a denial of service caused by a kernel assertion panic triggered by a negative linger time in the SO_LINGER socket option. Concretely, lo...

CVE-2005-4783

CVE-2005-4783 concerns NetBSD kernels where kernfs_xread in kernfs_vnops.c fails to check for a negative offset when reading the message buffer. This lack of validation allows local users to read arbitrary kernel memory. The description specifies impact as a local information disclosure, affectin...

CVE-2005-4782

NetBSD 2.0 before 2.0.4, 2.1 before 2.1.1, and 3, when the kernel is compiled with "options DIAGNOSTIC," allows local users to cause a denial of service kernel assertion panic via a negative linger time in the SOLINGER socket option...

CVE-2005-4783

kernfsxread in kernfsvnops.c in NetBSD before 20050831 does not check for a negative offset when reading the message buffer, which allows local users to read arbitrary kernel memory...

CVE-2005-4776

CVE-2005-4776 describes an integer overflow in the NetBSD FreeBSD compatibility code (freebsd_misc.c) affecting NetBSD-current, NetBSD-3, NetBSD-2.0, and NetBSD-2 prior to 20050913, and NetBSD-1.6 prior to 20050914. This vulnerability could allow local users to cause a denial of service via heap ...

CVE-2005-4779

CVE-2005-4779 relates to NetBSD 2.0.2, where verifiedexecioctl in verified_exec.c calls NDINIT with UIO_USERSPACE instead of UID_SYSSPACE, removing the verified exec kernel subsystem functionality. This change, as documented, could allow local users to run Trojan horse programs. Multiple sources ...

CVE-2005-4779

verifiedexecioctl in verifiedexec.c in NetBSD 2.0.2 calls NDINIT with UIOUSERSPACE rather than UIDSYSSPACE, which removes the functionality of the verified exec kernel subsystem and might allow local users to execute Trojan horse programs...

Multiple NetBSD security vulnerabilities

RNG generator non-random strem generation, DoS conditions...

[SA19616] NetBSD "sysctl()" Local Denial of Service Vulnerability

TITLE: NetBSD "sysctl" Local Denial of Service Vulnerability SECUNIA ADVISORY ID: SA19616 VERIFY ADVISORY: http://secunia.com/advisories/19616/ CRITICAL: Not critical IMPACT: DoS WHERE: Local system OPERATING SYSTEM: NetBSD 1.x http://secunia.com/product/255/ DESCRIPTION: A vulnerability has been...

[SA19585] NetBSD False Intel Hardware RNG Detection Security Issue

TITLE: NetBSD False Intel Hardware RNG Detection Security Issue SECUNIA ADVISORY ID: SA19585 VERIFY ADVISORY: http://secunia.com/advisories/19585/ CRITICAL: Less critical IMPACT: Security Bypass WHERE: From remote OPERATING SYSTEM: NetBSD 1.x http://secunia.com/product/255/ DESCRIPTION: A securit...

[SA19615] NetBSD SIOCGIFALIAS "ioctl()" Denial of Service Vulnerability

TITLE: NetBSD SIOCGIFALIAS "ioctl" Denial of Service Vulnerability SECUNIA ADVISORY ID: SA19615 VERIFY ADVISORY: http://secunia.com/advisories/19615/ CRITICAL: Not critical IMPACT: DoS WHERE: Local system OPERATING SYSTEM: NetBSD 1.x http://secunia.com/product/255/ DESCRIPTION: A vulnerability ha...

CVE-2006-1646

The CVE-2006-1646 issue concerns the Internet Key Exchange version 1 (IKEv1) implementation (isakmp_agg.c) in the Shoichi Sakane KAME Project racoon, as used by NetBSD, certain FreeBSD releases, and potentially other BSD/Linux distributions. In aggressive mode, remote attackers can trigger a deni...

CVE-2006-1589

The elfloadfile function in NetBSD 2.0 through 3.0 allows local users to cause a denial of service kernel crash via an ELF interpreter that does not have a PTLOAD section in its header, which triggers a null dereference...

CVE-2006-1588

The bridge ioctl ifbridge code in NetBSD 1.6 through 3.0 does not clear sensitive memory before copying ioctl results to the requesting process, which allows local users to obtain portions of kernel memory...

CVE-2006-1587

NetBSD 1.6 up to 3.0, when a user has "set record" in .mailrc with the default umask set, creates the record file with 0644 permissions, which allows local users to read the record file...

Design/Logic Flaw

NetBSD 1.6 up to 3.0, when a user has "set record" in .mailrc with the default umask set, creates the record file with 0644 permissions, which allows local users to read the record file...

Design/Logic Flaw

The elfloadfile function in NetBSD 2.0 through 3.0 allows local users to cause a denial of service kernel crash via an ELF interpreter that does not have a PTLOAD section in its header, which triggers a null dereference...