NetBSD - The Community's Center for Security


The central voice for Linux and Open Source security news

Welcome!

Sign up!

EnGarde Community

Polls

Is Mandatory Access Control Too Much Security For Enterprise's Linux?

	Yes, too difficult to configure and manage.
	No. You can never have enough security.
	Yes. Standard Linux security settings work for us.
	No. Industry demands will demand SELinux.
	Don't know.

Advisories

Community

Linux Events

Linux User Groups

Link to Us

Security Center

Book Reviews

Security Dictionary

Security Tips

SELinux

White Papers

Featured Blogs

Emily Ratliff: OS Security

DanWalsh LiveJournal

Security Bloggers Network

Latest Newsletters

Linux Advisory Watch: October 10th, 2008

Linux Security Week: October 6th, 2008

LinuxSecurity Newsletters

RSS Feeds

Get the LinuxSecurity news you want faster with RSS

NetBSD

Find the information you need for your favorite open source distribution

To browse through our weekly Linux Advisory Watch newsletters, click here.

NetBSD: Insufficient argument validation in compat code

17 December 2004

Some of the translation functions performed unsafe operations using the syscall arguments, and were exploitable to cause kernel traps. Some of the flaws may be exploitable and result in privilege escalation.

NetBSD: ftpd Privilege escalation vulnerability

20 August 2004

A set of flaws in the ftpd source code can be used together to achieve root access within an ftp session.

NetBSD: cvs Heap overflow vulnerabilities

08 June 2004

CVS had heap overflow vulnerabilities which can be trigged remotely by malicious people on the net.

NetBSD: systrace Privilege escalation vulnerability

13 May 2004

A local user that is allowed to use /dev/systrace can obtain root access.

NetBSD: tcp Denial of service vulnerability

21 April 2004

Patch modifies the TCP/IP stack to minimize the probability of a disconnection or data injection attack, even without using IPSec.