1722 matches found
Проблемамы с сигналами в OpenBSD
При вызове accept над сокетом переданным другому процессу сбрасывается информация о владельце сокета, что позволяет генерировать сигналы SIGIO, SIGURG для процесса-владельца...
OpenBSD bug
Hi I recently found a vulnerability in OpenBSD kernel that allows any user capable of executing a process to deliver SIGURG and SIGIO signals to any process or group of process owned by any user in the system. Although the default behaviour in OpenBSD is to ignore these signals, this issue could ...
CVE-2001-0378
CVE-2001-0378 affects OpenBSD readline prior to 4.1 (OpenBSD 2.8 and earlier). The vulnerability stems from creating readline history files with insecure permissions, allowing a local attacker to recover potentially sensitive information via history files. The NVD metrics list a base score of 2.1...
CVE-2001-0378
readline prior to 4.1, in OpenBSD 2.8 and earlier, creates history files with insecure permissions, which allows a local attacker to recover potentially sensitive information via readline history files...
CVE-2001-1145
fts routines in FreeBSD 4.3 and earlier, NetBSD before 1.5.2, and OpenBSD 2.9 and earlier can be forced to change chdir into a different directory than intended when the directory above the current directory is moved, which could cause scripts to perform dangerous actions on the wrong directories...
openbsdrace.txt
[email protected] Georgi Guninski security advisory 47, 2001 OpenBSD 2.9,2.8 local root compromise Systems affected: OpenBSD 2.9,2.8 Have not tested on other OSes but they may be vulnerable Risk: High Date: 14 June 2001 Legal Notice: This Advisory is Copyright c 2001 Georgi Guninski. You may...
CVE-2001-0378
readline prior to 4.1, in OpenBSD 2.8 and earlier, creates history files with insecure permissions, which allows a local attacker to recover potentially sensitive information via readline history files...
OpenBSD 2.9,2.8 local root compromise
Return-Path: pent.sci-nnov.ru!securityfocus.com!bugtraq-return-420-vlad=sandy.ru Received: from adm.sci-nnov.ru adm.sci-nnov.ru 193.125.71.2 by pent.sci-nnov.ru 8.11.3/Dmiter-4.1-AGK-1.1 with ESMTP id f5EFXH490671 for [email protected]; Thu, 14 Jun 2001 19:33:17 +0400 MSD Received: from...
Проблемы в работе с файловыми дескрипторами в OpenBSD (VFS races)
Наличие вызова блокирующей функции между проверкой файлового дескриптора и операцией над ним, позволяет провести операцию над закрытым дескриптором, если дескриптор был закрыт в другом потоке приложения...
Locally exploitable races in OpenBSD VFS
my apologies if it ends up submitted twice Let's start with the trivial: good old aliasing bugs. Example 1: dup2 vs. close. Relevant file: kern/kerndescrip.c sysdup2p, v, retval struct proc p; void v; registert retval; snip if uintold = fdp-fdnfiles || fdp-fdofilesold == NULL || uintnew =...
CVE-2001-1047
Race condition in OpenBSD VFS allows local users to cause a denial of service kernel panic by 1 creating a pipe in one thread and causing another thread to set one of the file descriptors to NULL via a close, or 2 calling dup2 on a file descriptor in one process, then setting the descriptor to NU...
CVE-2000-0310
IP fragment assembly in OpenBSD 2.4 allows a remote attacker to cause a denial of service by sending a large number of fragmented packets...
CVE-2000-0310
OpenBSD 2.4 is affected by CVE-2000-0310 through the IP fragment assembly mechanism. The vulnerability can allow a remote attacker to cause a denial of service by sending a large number of fragmented packets, affecting availability. The provided documents describe the issue but do not offer a rem...
CVE-2001-0268
CVE-2001-0268 affects NetBSD 1.5 and earlier and OpenBSD 2.8 and earlier. When the USER_LDT kernel option is enabled, the i386_set_ldt system call does not validate a call gate target, allowing local users to gain root privileges by creating a segment call gate in the Local Descriptor Table whose...
CVE-2000-0313
Technical details about CVE-2000-0313 are not provided in the connected documents. The initial description mentions an OpenBSD 2.6 local interface-media change issue, but no concrete product/version specifics or remediation are included here. Monitor for updates.
CVE-2001-0284
The CVE-2001-0284 entry describes a buffer overflow in the IPSEC authentication mechanism for OpenBSD 2.8 and earlier. The underlying issue is in the IPSEC AH (IPv4 option) processing, allowing remote attackers to cause a denial of service and potentially execute arbitrary commands via a malforme...
CVE-2000-0309
Public technical details about CVE-2000-0309 are not provided in the connected documents. The initial entry notes a local DoS in OpenBSD 2.4 with DDB, but no further technical specifics or fixes are included here. Monitor for updates.
CVE-2000-0309
The i386 trace-trap handling in OpenBSD 2.4 with DDB enabled allows a local user to cause a denial of service...
CVE-2001-0284
Buffer overflow in IPSEC authentication mechanism for OpenBSD 2.8 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a malformed Authentication header AH IPv4 option...