1743 matches found
CVE-2001-1415
vi.recover in OpenBSD before 3.1 allows local users to remove arbitrary zero-byte files such as device nodes...
Проблемамы с сигналами в OpenBSD
При вызове accept над сокетом переданным другому процессу сбрасывается информация о владельце сокета, что позволяет генерировать сигналы SIGIO, SIGURG для процесса-владельца...
OpenBSD bug
Hi I recently found a vulnerability in OpenBSD kernel that allows any user capable of executing a process to deliver SIGURG and SIGIO signals to any process or group of process owned by any user in the system. Although the default behaviour in OpenBSD is to ignore these signals, this issue could ...
CVE-2001-0378
CVE-2001-0378 affects OpenBSD readline prior to 4.1 (OpenBSD 2.8 and earlier). The vulnerability stems from creating readline history files with insecure permissions, allowing a local attacker to recover potentially sensitive information via history files. The NVD metrics list a base score of 2.1...
CVE-2001-0378
readline prior to 4.1, in OpenBSD 2.8 and earlier, creates history files with insecure permissions, which allows a local attacker to recover potentially sensitive information via readline history files...
CVE-2001-1145
fts routines in FreeBSD 4.3 and earlier, NetBSD before 1.5.2, and OpenBSD 2.9 and earlier can be forced to change chdir into a different directory than intended when the directory above the current directory is moved, which could cause scripts to perform dangerous actions on the wrong directories...
openbsdrace.txt
[email protected] Georgi Guninski security advisory 47, 2001 OpenBSD 2.9,2.8 local root compromise Systems affected: OpenBSD 2.9,2.8 Have not tested on other OSes but they may be vulnerable Risk: High Date: 14 June 2001 Legal Notice: This Advisory is Copyright c 2001 Georgi Guninski. You may...
CVE-2001-0378
readline prior to 4.1, in OpenBSD 2.8 and earlier, creates history files with insecure permissions, which allows a local attacker to recover potentially sensitive information via readline history files...
OpenBSD 2.9,2.8 local root compromise
Return-Path: pent.sci-nnov.ru!securityfocus.com!bugtraq-return-420-vlad=sandy.ru Received: from adm.sci-nnov.ru adm.sci-nnov.ru 193.125.71.2 by pent.sci-nnov.ru 8.11.3/Dmiter-4.1-AGK-1.1 with ESMTP id f5EFXH490671 for [email protected]; Thu, 14 Jun 2001 19:33:17 +0400 MSD Received: from...
Locally exploitable races in OpenBSD VFS
my apologies if it ends up submitted twice Let's start with the trivial: good old aliasing bugs. Example 1: dup2 vs. close. Relevant file: kern/kerndescrip.c sysdup2p, v, retval struct proc p; void v; registert retval; snip if uintold = fdp-fdnfiles || fdp-fdofilesold == NULL || uintnew =...
Проблемы в работе с файловыми дескрипторами в OpenBSD (VFS races)
Наличие вызова блокирующей функции между проверкой файлового дескриптора и операцией над ним, позволяет провести операцию над закрытым дескриптором, если дескриптор был закрыт в другом потоке приложения...
CVE-2001-1047
Race condition in OpenBSD VFS allows local users to cause a denial of service kernel panic by 1 creating a pipe in one thread and causing another thread to set one of the file descriptors to NULL via a close, or 2 calling dup2 on a file descriptor in one process, then setting the descriptor to NU...
CVE-2000-0313
Vulnerability in OpenBSD 2.6 allows a local user to change interface media configurations...
CVE-2001-0284
The CVE-2001-0284 entry describes a buffer overflow in the IPSEC authentication mechanism for OpenBSD 2.8 and earlier. The underlying issue is in the IPSEC AH (IPv4 option) processing, allowing remote attackers to cause a denial of service and potentially execute arbitrary commands via a malforme...
CVE-2001-0284
Buffer overflow in IPSEC authentication mechanism for OpenBSD 2.8 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a malformed Authentication header AH IPv4 option...
CVE-2000-0313
Technical details about CVE-2000-0313 are not provided in the connected documents. The initial description mentions an OpenBSD 2.6 local interface-media change issue, but no concrete product/version specifics or remediation are included here. Monitor for updates.
CVE-2000-0310
IP fragment assembly in OpenBSD 2.4 allows a remote attacker to cause a denial of service by sending a large number of fragmented packets...
CVE-2001-0268
The i386setldt system call in NetBSD 1.5 and earlier, and OpenBSD 2.8 and earlier, when the USERLDT kernel option is enabled, does not validate a call gate target, which allows local users to gain root privileges by creating a segment call gate in the Local Descriptor Table LDT with a target that...
CVE-2000-0309
Public technical details about CVE-2000-0309 are not provided in the connected documents. The initial entry notes a local DoS in OpenBSD 2.4 with DDB, but no further technical specifics or fixes are included here. Monitor for updates.