OpenBSD semaphores DoS

DoS on large number of sequential calls to semop with differen semids...

CVE-2003-0955

OpenBSD kernel 3.3 and 3.4 are affected by CVE-2003-0955 due to a stack-based buffer overflow in iBCS2 emulation (ibcs2_exec.c) and in exec_elf.c triggered by a program with an invalid header. Local users can cause a denial of service (kernel panic) and possibly execute arbitrary code on 3.4. The...

CVE-2003-0955

OpenBSD kernel 3.3 and 3.4 allows local users to cause a denial of service kernel panic and possibly execute arbitrary code in 3.4 via a program with an invalid header that is not properly handled by 1 ibcs2exec.c in the iBCS2 emulation compatibcs2 or 2 execelf.c, which leads to a stack-based...

OpenBSD 3.33.4 - semctlsemop Local Unexpected Array Indexing

OpenBSD 3.33.4 - semctlsemop Local Unexpected Array Indexing // source: https://www.securityfocus.com/bid/9086/info A local OpenBSD kernel vulnerability has been discovered when handling the semctl and semop system calls. The problem specifically occurs due to improper sanity checking before...

OpenBSD 3.3/3.4 - semctl/semop Local Unexpected Array Indexing

// source: https://www.securityfocus.com/bid/9086/info A local OpenBSD kernel vulnerability has been discovered when handling the semctl and semop system calls. The problem specifically occurs due to improper sanity checking before handling a user-supplied semaphore set. It is said that this coul...

[Full-Disclosure] OpenBSD kernel panic, yet still O*BSD much worse than MS-DoS 6.0

ppl think "hey, local DoS sucks", therefore they are. i think "hey, obsd sucks", therefore i am. include stdio.h include sys/param.h include sys/sysctl.h int main unsigned int blah2 = CTLKERN, 0 , addr = -4096 + 1; return sysctl blah, 2, void addr, &blah1, 0, 0; it's wide, it's opened, it's surel...

OpenBSD sysctl DoS

No description provided...

OpenBSD 2.x 3.3 - exec_ibcs2_coff_prep_zmagic() kernel stack overflow

OpenBSD 2.x 3.3 - execibcs2coffprepzmagic kernel stack overflow / OpenBSD 2.x - 3.3 / / execibcs2coffprepzmagic kernel stack overflow / / note: ibcs2 binary compatibility with SCO and ISC is enabled / / in the default install / / Copyright Feb 26 2003 Sinan "noir" Eren / / noir olympos org | noir...

OpenBSD 3.33.4 - sysctl Local Denial of Service

OpenBSD 3.33.4 - sysctl Local Denial of Service // source: https://www.securityfocus.com/bid/9073/info A denial of service vulnerability has been reported for OpenBSD, specifically when handling malformed calls to sysctl. By invoking systcl and passing a specific flag in conjunction with a negati...

OpenBSD kernel holes ...

once again i am honored to present you a generic and robust way to own OpenBSD 2.x-3.x, enjoy ; it is quite funny to name ring 0 overflow patches as "reliability fixes". who does theo thinks he is fooling ? kiddies in his cult ? you can patch your useless/old openbsd systems by visiting;...

OpenBSD DoS and buffer overflow

NULL pointer is possible on executable file parsing. In case patches against this vulnerability are installed there is a new vulnerability with kernel mode buffer overflow...

OpenBSD 2.x - 3.3 exec_ibcs2_coff_prep_zmagic() Kernel Exploit

Exploit for bsd platform in category local exploits ============================================================== OpenBSD 2.x - 3.3 execibcs2coffprepzmagic Kernel Exploit ============================================================== / OpenBSD 2.x - 3.3 / / execibcs2coffprepzmagic kernel stack...

OpenBSD 3.3/3.4 - 'sysctl' Local Denial of Service

// source: https://www.securityfocus.com/bid/9073/info A denial of service vulnerability has been reported for OpenBSD, specifically when handling malformed calls to sysctl. By invoking systcl and passing a specific flag in conjunction with a negative argument may trigger a kernel panic. This cou...

OpenBSD 2.x < 3.3 - 'exec_ibcs2_coff_prep_zmagic()' kernel stack overflow

/ OpenBSD 2.x - 3.3 / / execibcs2coffprepzmagic kernel stack overflow / / note: ibcs2 binary compatibility with SCO and ISC is enabled / / in the default install / / Copyright Feb 26 2003 Sinan "noir" Eren / / noir olympos org | noir uberhax0r net / / greets to brother nahual for making this...

OpenBSD - ibcs2_exec Kernel Code Execution

OpenBSD - ibcs2exec Kernel Code Execution // // Patch ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.4/common/005exec.patch // include include include include / $OpenBSD: ibcs2exec.h,v 1.3 2002/03/14 01:26:50 millert Exp $ / / $NetBSD: ibcs2exec.h,v 1.4 1995/03/14 15:12:24 scottb Exp $ / / Copyright...

OpenBSD (ibcs2_exec) Kernel Local Exploit

Exploit for bsd platform in category local exploits ========================================= OpenBSD ibcs2exec Kernel Local Exploit ========================================= // // Patch ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.4/common/005exec.patch // include include include include /...

OpenBSD - 'ibcs2_exec' Kernel Code Execution

// // Patch ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.4/common/005exec.patch // include include include include / $OpenBSD: ibcs2exec.h,v 1.3 2002/03/14 01:26:50 millert Exp $ / / $NetBSD: ibcs2exec.h,v 1.4 1995/03/14 15:12:24 scottb Exp $ / / Copyright c 1994, 1995 Scott Bartram All rights...

[Full-Disclosure] OpenBSD kernel panic, yet still *BSD much better than windows

Georgi Guninski security advisory 63, 2003 OpenBSD kernel panic, yet still BSD much better than windows Systems affected: tested on OpenBSD 3.3 and 2.8, probably other versions also affected Risk: Low Date: 4 November 2003 Legal Notice: This Advisory is Copyright c 2003 Georgi Guninski. You may...

OpenBSD 2.x3.x - Local Malformed Binary Execution Denial of Service

OpenBSD 2.x3.x - Local Malformed Binary Execution Denial of Service // source: https://www.securityfocus.com/bid/8978/info The OpenBSD team has fixed a vulnerability in the OpenBSD kernel when handling certain executables. It appears that the problem lies in the lack of specific sanity checks on...

OpenBSD 2.x/3.x - Local Malformed Binary Execution Denial of Service

// source: https://www.securityfocus.com/bid/8978/info The OpenBSD team has fixed a vulnerability in the OpenBSD kernel when handling certain executables. It appears that the problem lies in the lack of specific sanity checks on binary header values. As a result, a user who constructs a malformed...