NetBSD - The Community's Center for Security


The central voice for Linux and Open Source security news

Welcome!

Sign up!

EnGarde Community

Polls

How strictly do your users obey your security policies?

	To the letter.
	For the most part.
	When it suits them.
	By chance.
	Not at all.

Advisories

Community

Linux Events

Linux User Groups

Link to Us

Security Center

Book Reviews

Security Dictionary

Security Tips

SELinux

White Papers

Featured Blogs

Emily Ratliff: OS Security

DanWalsh LiveJournal

Security Bloggers Network

Latest Newsletters

Linux Advisory Watch: November 21st, 2008

Linux Security Week: November 17th, 2008

LinuxSecurity Newsletters

RSS Feeds

Get the LinuxSecurity news you want faster with RSS

NetBSD

Find the information you need for your favorite open source distribution

To browse through our weekly Linux Advisory Watch newsletters, click here.

NetBSD: heimdal buffer overflow

22 October 2002

In Heimdal releases earlier than 0.5.1 kadmind has a buffer overflow in the kerberos version 4 compatibility code.

NetBSD: IPsec kernel panic

22 October 2002

The KAME-based IPsec implementation included in NetBSD was missing some packet length checks, and could be tricked into passing negative value as buffer length. By transmiting a specially-formed (very short) ESP packet, a malicious sender can cause a cause kernel panic on the victim node.

NetBSD: 'rogue' Elevated privileges vulnerability

08 October 2002

There are several buffer overflows in the processing of saved gameswhen restarting rogue(6), that allow one to obtain group "games."

NetBSD: 'pic' Buffer overflow vulnerability

08 October 2002

pic(1) had a buffer overrun in argument handling.The problem could be remotely exploited depending on lpd(8) setup.

NetBSD: libc/libresolve Buffer overflow

08 October 2002

BIND-based DNS resolver did not allocate a sufficiently large receivememory buffer. Large DNS responses (even if valid) could overrun thebuffer, or could confuse DNS response parsing.

NetBSD: Sendmail arbitrary command execution

08 October 2002

If smrsh (sendmail restricted shell) is in use with sendmail,local user can bypass access restrictions imposed by smrsh.

NetBSD: 'talkd' Buffer overflow vulnerability

08 October 2002

Rogue talk client is able to cause talkd to overrun the buffer,and could be able to compromise root privilege of the machine running talkd.

<< Start < Prev 4 5 6 Next > End >>

Results 36 - 42 of 121