CVE-2008-0384

OpenBSD 4.2 allows local users to cause a denial of service kernel panic by calling the SIOCGIFRTLABEL IOCTL on an interface that does not have a route label, which triggers a NULL pointer dereference when the return value from the rtlabelid2name function is not checked...

openbsd-deref.txt

/ OpenBSD 4.2 rtlabelid2name SIOCGIFRTLABEL ioctl Null Pointer Dereference local Denial of Service Exploit by Hunger Advisory: http://marc.info/?l=openbsd-security-announce&m=120007327504064 FOR TESTING PURPOSES ONLY! $ uname -mrsv OpenBSD 4.2 GENERIC375 i386 $ id uid=1000hunger gid=1000hunger...

OpenBSD 4.2 rtlabel_id2name() Local Null Pointer Dereference DoS

No description provided by source. / OpenBSD 4.2 rtlabelid2name SIOCGIFRTLABEL ioctl Null Pointer Dereference local Denial of Service Exploit by Hunger [email protected] Advisory: http://marc.info/?l=openbsd-security-announce&m=120007327504064 FOR TESTING PURPOSES ONLY! $ uname -mrsv OpenBSD 4.2...

OpenBSD 4.2 rtlabel_id2name() Local Null Pointer Dereference DoS

Exploit for bsd platform in category dos / poc ================================================================ OpenBSD 4.2 rtlabelid2name Local Null Pointer Dereference DoS ================================================================ / OpenBSD 4.2 rtlabelid2name SIOCGIFRTLABEL ioctl Null...

OpenBSD 4.2 - rtlabel_id2name() Local Null Pointer Dereference Denial of Service

OpenBSD 4.2 - rtlabelid2name Local Null Pointer Dereference Denial of Service / OpenBSD 4.2 rtlabelid2name SIOCGIFRTLABEL ioctl Null Pointer Dereference local Denial of Service Exploit by Hunger Advisory: http://marc.info/?l=openbsd-security-announce&m=120007327504064 FOR TESTING PURPOSES ONLY! $...

OpenBSD 4.2 - 'rtlabel_id2name()' Local Null Pointer Dereference Denial of Service

/ OpenBSD 4.2 rtlabelid2name SIOCGIFRTLABEL ioctl Null Pointer Dereference local Denial of Service Exploit by Hunger Advisory: http://marc.info/?l=openbsd-security-announce&m=120007327504064 FOR TESTING PURPOSES ONLY! $ uname -mrsv OpenBSD 4.2 GENERIC375 i386 $ id uid=1000hunger gid=1000hunger...

Debian Security Advisory DSA 134-1 (ssh)

The remote host is missing an update to ssh announced via advisory DSA 134-1. OpenVAS Vulnerability Test $Id: deb1341.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 134-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian: Security Advisory (DSA-1175-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OpenBSD rtlabel_id2name()本地拒绝服务漏洞

BUGTRAQ ID: 27252 OpenBSD是一款开放源代码Unix类操作系统。 OpenBSD中对ifconfig rtlabel的rtlabelid2name调用没有正确地验证返回值，如果没有分配标记或ID无效的话rtlabelid2name就可能返回空。本地攻击者可以通过在没有分配路由标记的接口上使用SIOCGIFRTLABEL ioctl导致内核忙碌。 OpenBSD 4.2 厂商补丁： OpenBSD ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Moderate: Red Hat Security Advisory: openssh security and bug fix update

Updated openssh packages that fix a security issue and various bugs are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. OpenSSH is OpenBSD's SSH Secure SHell protocol implementation. These packages include the core files necessar...

OpenBSD DHCP server buffer overflow

Integer overflow with "maximum message size" option leads to buffer overflow...

dhcpd stack-based buffer overlow

Stack-based buffer overflow in the consoptions function in options.c in dhcpd in OpenBSD 4.0 through 4.2, and some other dhcpd implementations based on ISC dhcp-2, allows remote attackers to execute arbitrary code or cause a denial of service daemon crash via a DHCP request specifying a maximum...

CVE-2003-1418

Apache HTTP Server 1.3.22 through 1.3.27 on OpenBSD allows remote attackers to obtain sensitive information via 1 the ETag header, which reveals the inode number, or 2 multipart MIME boundary, which reveals child process IDs PID...

CVE-2003-1418

CVE-2003-1418 affects Apache HTTP Server 1.3.22–1.3.27 on OpenBSD. The root cause is information disclosure via (1) ETag headers that reveal inode numbers and (2) multipart MIME boundaries that reveal child process IDs (PIDs). Practical impact is partial information disclosure that can aid reconn...

CVE-2002-2280

This CVE affects syslogd on OpenBSD 2.9–3.2 . The vulnerability occurs because the daemon does not update the source IP address of syslog packets when the host’s IP is changed (e.g., via ifconfig) without rebooting. As a result, the syslog server may receive messages with an outdated or incorrect...

CVE-2002-2280

syslogd on OpenBSD 2.9 through 3.2 does not change the source IP address of syslog packets when the machine's IP addressed is changed without rebooting, e.g. via ifconfig, which can cause incorrect information to be sent to the syslog server...

CVE-2003-1366

chpass in OpenBSD 2.0 through 3.2 allows local users to read portions of arbitrary files via a hard link attack on a temporary file used to store user database information...

CVE-2003-1366

CVE-2003-1366 affects OpenBSD versions 2.0–3.2 in the chpass utility, enabling local users to read portions of arbitrary files via a hard link attack on a temporary file used to store user database information. The vulnerability is described with a CVSS v2 base score of 3.3 (LOCAL, MEDIUM complex...

[SECURITY] Fedora Core 6 Update: openssh-4.3p2-25.fc6

SSH Secure SHell is a program for logging into and executing commands on a remote machine. SSH is intended to replace rlogin and rsh, and to provide secure encrypted communications between two untrusted hosts over an insecure network. X11 connections and arbitrary TCP/IP ports can also be forward...

OpenBSD DHCPD服务程序远程栈溢出漏洞

BUGTRAQ ID: 25984 OpenBSD是一款开放源代码Unix类操作系统。 OpenBSD系统的DHCP协议实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制服务器。 OpenBSD的options.c文件中的consoptions函数没有正确地处理DHCP请求。如果远程攻击者所发送的DHCP请求中指定最大消息大小小于最小IP MTU（278）的话，就会在OpenBSD中导致dhcpd8覆盖栈缓冲区，执行任意指令。 OpenBSD OpenBSD 4.2 OpenBSD OpenBSD 4.1 OpenBSD OpenBSD 4.0...