EUVD-2005-0961

Malware in sbrugna...

Session fixation

The TCP stack in 4.3BSD Net/2, as used in FreeBSD 5.4, NetBSD possibly 2.0, and OpenBSD possibly 3.6, does not properly implement the session timer, which allows remote attackers to cause a denial of service resource consumption via crafted packets...

CVE-2005-0637

The copy functions in locore.s such as copyout in OpenBSD 3.5 and 3.6, and possibly other BSD based operating systems, may allow attackers to exceed certain address boundaries and modify kernel memory...

CVE-2005-0740

The TCP stack tcpinput.c in OpenBSD 3.5 and 3.6 allows remote attackers to cause a denial of service system panic via crafted values in the TCP timestamp option, which causes invalid arguments to be used when calculating the retransmit timeout...