CVE-2004-0221

Affected software / component: OpenBSD isakmpd (OpenBSD 3.4 and earlier). Root cause / weakness: Multiple payload handling flaws in isakmpd’s ISAKMP packet processing allow out-of-bounds reads when processing a Delete payload with a large number of SPIs, leading to a remote denial of service (cra...

CVE-2004-0220

isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service via an ISAKMP packet with a malformed Cert Request payload, which causes an integer underflow that is used in a malloc operation that is not properly handled, as demonstrated by the Striker ISAKMP Protocol Tes...

CVE-2004-0222

Multiple memory leaks in isakmpd in OpenBSD 3.4 and earlier allow remote attackers to cause a denial of service memory exhaustion via certain ISAKMP packets, as demonstrated by the Striker ISAKMP Protocol Test Suite...

CVE-2004-0219

OpenBSD isakmpd vulnerability CVE-2004-0219 stems from flaws in ISAKMP packet handling, where malformed IPSEC SA payloads can trigger out-of-bounds reads and crash the daemon, causing remote denial of service. Affected: OpenBSD 3.4 and earlier (and related OpenBSD patches for -current/-stable). E...

CVE-2004-0221

isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service crash via an ISAKMP packet with a delete payload containing a large number of SPIs, which triggers an out-of-bounds read error, as demonstrated by the Striker ISAKMP Protocol Test Suite...

CVE-2004-0218

isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service infinite loop via an ISAKMP packet with a zero-length payload, as demonstrated by the Striker ISAKMP Protocol Test Suite...

PT-2004-1387 · Openbsd · Openbsd

Name of the Vulnerable Software and Affected Versions: OpenBSD versions 3.4 and earlier Description: The issue is related to multiple memory leaks in the isakmpd component, which can be exploited by remote attackers to cause a denial of service due to memory exhaustion. This can be achieved by...

PT-2004-1386 · Openbsd · Openbsd

Name of the Vulnerable Software and Affected Versions: OpenBSD versions 3.4 and earlier Description: The issue allows remote attackers to cause a denial of service crash via an ISAKMP packet with a delete payload containing a large number of SPIs, which triggers an out-of-bounds read error. This...

R7-0018: OpenBSD isakmpd payload handling denial-of-service vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Rapid7, Inc. Security Advisory Visit http://www.rapid7.com/ to download NeXpose, the world's most advanced vulnerability scanner. Linux and Windows 2000/XP versions are available now! Rapid7 Advisory R7-0018 OpenBSD isakmpd payload handling...

isakmpd payload handling denial-of-service vulnerabilities

Numerous errors in isakmpd's input packet validation lead to denial-of-service vulnerabilities. From the Rapid7 advisory: The ISAKMP packet processing functions in OpenBSD's isakmpd daemon contain multiple payload handling flaws that allow a remote attacker to launch a denial of service attack...

[PINE-CERT-20040201] reference count overflow in shmat()

------------------------------------------------------------------------------- Pine Digital Security Advisory ------------------------------------------------------------------------------- Advisory ID : PINE-CERT-20040201 CAN-2004-0114 Authors : Joost Pol Vendor Informed : 2004-02-01 Issue date...

[Full-Disclosure] Remote openbsd crash with ip6, yet still openbsd much better than windows

Georgi Guninski security advisory 66, 2004 Remote openbsd crash with ip6, yet still openbsd much better than windows Systems affected: tested on openbsd 3.4 not clear about netbsd freebsd not vulnerable Risk: Medium Date: 4 February 2004 Legal Notice: This Advisory is Copyright c 2004 Georgi...

OpenBSD IPv6 DoS

Kernel crashes on TCP connection request received after small MTU requested with ICMPV6PKTTOOBIG...

CVE-2003-1366

chpass in OpenBSD 2.0 through 3.2 allows local users to read portions of arbitrary files via a hard link attack on a temporary file used to store user database information...

CVE-2003-1418

Apache HTTP Server 1.3.22 through 1.3.27 on OpenBSD allows remote attackers to obtain sensitive information via 1 the ETag header, which reveals the inode number, or 2 multipart MIME boundary, which reveals child process IDs PID...

Remote crash in tcpdump from OpenBSD

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------- Original Message -------- Subject: user/3610: repetable tcpdump remote crash Resent-Date: Sat, 20 Dec 2003 08:55:02 -0700 MST Resent-From: [email protected] GNATS Filer Resent-To: [email protected] Date: Sat, 20 Dec 2003 16:42:25 +01...

Tcpdump 3.x - L2TP Parser Remote Denial of Service

Tcpdump 3.x - L2TP Parser Remote Denial of Service source: https://www.securityfocus.com/bid/9263/info A vulnerability has been reported to exist in the software that may allow a remote attacker to cause a denial of service condition in tcpdump. The issue presents itself when an attacker sends a...

Tcpdump 3.x - L2TP Parser Remote Denial of Service

source: https://www.securityfocus.com/bid/9263/info A vulnerability has been reported to exist in the software that may allow a remote attacker to cause a denial of service condition in tcpdump. The issue presents itself when an attacker sends a maliciously formatted packet containing 0xff,0x02...

CVE-2003-0955

OpenBSD kernel 3.3 and 3.4 allows local users to cause a denial of service kernel panic and possibly execute arbitrary code in 3.4 via a program with an invalid header that is not properly handled by 1 ibcs2exec.c in the iBCS2 emulation compatibcs2 or 2 execelf.c, which leads to a stack-based...

[Full-Disclosure] yet another panic() in OpenBSD

a project lacking the basic QA and unit testing and here is the outcome: include stdio.h include sys/types.h include sys/sem.h include sys/ipc.h int main int i; fori = 0; i 0x40; i++ semopi, struct sembuf NULL, 0; PANIC in OpenBSD 3.3 and 3.4 is confirmed. Full-Disclosure - We believe in it...