openbsd openbsd 3.5 vulnerabilities and exploits

(subscribe to this query)

Multiple vulnerabilities in the SACK functionality in (1) tcp_input.c and (2) tcp_usrreq.c OpenBSD 3.5 and 3.6 allow remote malicious users to cause a denial of service (memory exhaustion or system crash).

Openbsd Openbsd 3.5 Openbsd Openbsd 3.6

The copy functions in locore.s such as copyout in OpenBSD 3.5 and 3.6, and possibly other BSD based operating systems, may allow malicious users to exceed certain address boundaries and modify kernel memory.

Openbsd Openbsd 3.5 Openbsd Openbsd 3.6

Multiple integer overflows in (1) procfs_cmdline.c, (2) procfs_fpregs.c, (3) procfs_linux.c, (4) procfs_regs.c, (5) procfs_status.c, and (6) procfs_subr.c in procfs for OpenBSD 3.5 and previous versions allow local users to read sensitive kernel memory and possibly perform other ...

Openbsd Openbsd 3.4 Openbsd Openbsd 3.5

Heap-based buffer overflow in isakmpd on OpenBSD 3.4 up to and including 3.6 allows local users to cause a denial of service (panic) and corrupt memory via IPSEC credentials on a socket.

Openbsd Openbsd 3.4 Openbsd Openbsd 3.5 Openbsd Openbsd 3.6

login_radius on OpenBSD 3.2, 3.5, and possibly other versions does not verify the shared secret in a response packet from a RADIUS server, which allows remote malicious users to bypass authentication by spoofing server replies.

Openbsd Openbsd 3.2 Openbsd Openbsd 3.4 Openbsd Openbsd 3.5

The bridge functionality in OpenBSD 3.4 and 3.5, when running a gateway configured as a bridging firewall with the link2 option for IPSec enabled, allows remote malicious users to cause a denial of service (crash) via an ICMP echo (ping) packet.

Openbsd Openbsd 3.2 Openbsd Openbsd 3.3 Openbsd Openbsd 3.4 Openbsd Openbsd 3.5

sshd in OpenSSH 3.5p1, when PermitRootLogin is disabled, immediately closes the TCP connection after a root login attempt with the correct password, but leaves the connection open after an attempt with an incorrect password, which makes it easier for remote malicious users to gue...

Openbsd Openssh 3.5 Openbsd Openssh 3.5p1

The TCP stack (tcp_input.c) in OpenBSD 3.5 and 3.6 allows remote malicious users to cause a denial of service (system panic) via crafted values in the TCP timestamp option, which causes invalid arguments to be used when calculating the retransmit timeout.

Openbsd Openbsd 2.0 Openbsd Openbsd 2.1 Openbsd Openbsd 2.2 Openbsd Openbsd 2.3 Openbsd Openbsd 2.4 Openbsd Openbsd 2.5 Openbsd Openbsd 2.6 Openbsd Openbsd 2.7 Openbsd Openbsd 2.8 Openbsd Openbsd 2.9 Openbsd Openbsd 3.0 Openbsd Openbsd 3.1

Format string vulnerability in pw_error function in BSD libutil library allows local users to gain root privileges via a malformed password in commands such as chpass or passwd.

Freebsd Freebsd 3.2 Freebsd Freebsd 3.3 Freebsd Freebsd 3.4 Freebsd Freebsd 3.5 Freebsd Freebsd 4.0 Netbsd Netbsd 1.4 Netbsd Netbsd 1.4.1 Netbsd Netbsd 1.4.2 Openbsd Openbsd 2.3 Openbsd Openbsd 2.4 Openbsd Openbsd 2.5 Openbsd Openbsd 2.6

1 EDB exploit

Integer overflow in the fts_build function in fts.c in libc in (1) OpenBSD 4.4 and previous versions and (2) Microsoft Interix 6.0 build 10.0.6030.0 allows context-dependent malicious users to cause a denial of service (application crash) via a deep directory tree, related to the...

Microsoft Interix 6.0 Openbsd Openbsd Openbsd Openbsd 2.0 Openbsd Openbsd 2.1 Openbsd Openbsd 2.2 Openbsd Openbsd 2.3 Openbsd Openbsd 2.4 Openbsd Openbsd 2.5 Openbsd Openbsd 2.6 Openbsd Openbsd 2.7 Openbsd Openbsd 2.8 Openbsd Openbsd 2.9

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook