CVE-2004-0819

The bridge functionality in OpenBSD 3.4 and 3.5, when running a gateway configured as a bridging firewall with the link2 option for IPSec enabled, allows remote attackers to cause a denial of service crash via an ICMP echo ping packet...

CVE-2004-0482

Multiple integer overflows in 1 procfscmdline.c, 2 procfsfpregs.c, 3 procfslinux.c, 4 procfsregs.c, 5 procfsstatus.c, and 6 procfssubr.c in procfs for OpenBSD 3.5 and earlier allow local users to read sensitive kernel memory and possibly perform other unauthorized activities...

Dr.Web for OpenBSD failure

Small stack size causes daemon fail to start if LocalScan = no configured whth message stack overflow in function int scanMailint, timet , int, int, const char...

unauthorized deletion of IPsec SAs in isakmpd, still

1 Abstract For nearly 10 months a handful of OpenBSD-developers is trying to fix a plethora of payload handling flaws in isakmpd. On 2004/01/13 they released something like a final patch to a broader public. The patch protects against some specific attacks, but does not solve the problem. 2...

OpenBSD 3.x - ISAKMPD Security Association Piggyback Delete Payload Denial of Service

OpenBSD 3.x - ISAKMPD Security Association Piggyback Delete Payload Denial of Service source: https://www.securityfocus.com/bid/10496/info It is reported that OpenBSD's isakmpd daemon is susceptible to a remote denial of service vulnerability. An attacker is able to delete security associations a...

OpenBSD 3.x - ISAKMPD Security Association Piggyback Delete Payload Denial of Service

source: https://www.securityfocus.com/bid/10496/info It is reported that OpenBSD's isakmpd daemon is susceptible to a remote denial of service vulnerability. An attacker is able to delete security associations and policies from IPSec VPN's by sending a malformed UDP ISAKMP packet to a vulnerable...

[UNIX] OpenBSD Procfs Memory Disclosure Vulnerability

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

OpenBSD kernel information leak

It's possible to read chunks from kernel memory via procfs...

CVE-2004-0482

The CVE-2004-0482 issue affects OpenBSD 3.5 and earlier in procfs components (procfs_cmdline.c, procfs_fpregs.c, procfs_linux.c, procfs_regs.c, procfs_status.c, procfs_subr.c) due to multiple integer overflows. This enables local users to read sensitive kernel memory and potentially perform other...

CVE-2004-0482

Multiple integer overflows in 1 procfscmdline.c, 2 procfsfpregs.c, 3 procfslinux.c, 4 procfsregs.c, 5 procfsstatus.c, and 6 procfssubr.c in procfs for OpenBSD 3.5 and earlier allow local users to read sensitive kernel memory and possibly perform other unauthorized activities...

PT-2004-1600 · Openbsd · Openbsd

Name of the Vulnerable Software and Affected Versions: OpenBSD versions 3.5 and earlier Description: The issue is related to multiple integer overflows in several procfs files for OpenBSD, including procfs cmdline.c, procfs fpregs.c, procfs linux.c, procfs regs.c, procfs status.c, and procfs...

CVE-2004-0222

Multiple memory leaks in isakmpd in OpenBSD 3.4 and earlier allow remote attackers to cause a denial of service memory exhaustion via certain ISAKMP packets, as demonstrated by the Striker ISAKMP Protocol Test Suite...

CVE-2004-0221

isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service crash via an ISAKMP packet with a delete payload containing a large number of SPIs, which triggers an out-of-bounds read error, as demonstrated by the Striker ISAKMP Protocol Test Suite...

CVE-2004-0220

isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service via an ISAKMP packet with a malformed Cert Request payload, which causes an integer underflow that is used in a malloc operation that is not properly handled, as demonstrated by the Striker ISAKMP Protocol Tes...

CVE-2004-0219

isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service crash via an ISAKMP packet with a malformed IPSEC SA payload, as demonstrated by the Striker ISAKMP Protocol Test Suite...

CVE-2004-0218

isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service infinite loop via an ISAKMP packet with a zero-length payload, as demonstrated by the Striker ISAKMP Protocol Test Suite...

CVE-2004-0220

CVE-2004-0220 affects OpenBSD isakmpd (OpenBSD 3.4 and older). A malformed Certificate Request payload in ISAKMP can trigger an integer underflow, leading to a failed malloc of a large memory allocation and a denial of service. OpenBSD has issued patches; mitigation is to update/rebuild isakmpd w...

CVE-2004-0218

OpenBSD isakmpd (OpenBSD 3.4 and earlier) is vulnerable to a remote denial of service via crafted ISAKMP packets with a zero-length payload. The issue arises from insufficient validation of payload lengths, allowing an infinite loop or memory-related exhaustion. Rapid7’s R7-0018 advisory and CERT...

CVE-2004-0219

isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service crash via an ISAKMP packet with a malformed IPSEC SA payload, as demonstrated by the Striker ISAKMP Protocol Test Suite...

CVE-2004-0222

OpenBSD isakmpd (3.4 and earlier) is affected by memory-leak vulnerabilities in ISAKMP packet processing, allowing remote attackers to exhaust memory and cause a denial-of-service. The issue is described in Rapid7 R7-0018 and CERT/OpenBSD advisories, with references to multiple CVEs (CAN-2004-021...