OpenBSD - The Community's Center for Security


The central voice for Linux and Open Source security news

Welcome!

Sign up!

EnGarde Community

Polls

What is the most important Linux security technology?

	SELinux
	grsecurity
	CIS Benchmark
	Bastille Linux
	iptables
	LIDS

Advisories

Community

Linux Events

Linux User Groups

Link to Us

Security Center

Book Reviews

Security Dictionary

Security Tips

SELinux

White Papers

Featured Blogs

All About Linux

DanWalsh LiveJournal

Securitydistro

Latest Newsletters

Linux Security Week: May 20th, 2013

Linux Advisory Watch: May 17th, 2013

LinuxSecurity Newsletters

RSS Feeds

Get the LinuxSecurity news you want faster with RSS

OpenBSD

Find the information you need for your favorite open source distribution

To browse through our weekly Linux Advisory Watch newsletters, click here.

OpenBSD: kernel heap overflow in IPsec

14 December 2004

On systems running isakmpd(8) it is possible for a local user to cause kernel memory corruption and system panic by setting ipsec(4) credentials on a socket. Stopping isakmpd(8) does not prevent the memory corruption.

OpenBSD: login_radius security flaw

21 September 2004

Eilko Bos has reported that radius authentication, as implemented by login_radius(8), was not checking the shared secret used for replies sent by the radius server.

OpenBSD: Xpm security fix

16 September 2004

Chris Evans reported several flaws (stack and integer overflows) in theXpm library code that parses image files (CAN-2004-0687, CAN-2004-0688).Some of these would be exploitable when parsing malicious image files inan application that handles XPM images, if they could escape ProPolice.

OpenBSD: zlib reliabilty fix

31 August 2004

A bug has been found in the version of zlib included in OpenBSD 3.5(and only 3.5) that could allow an attacker to crash programs linkedwith it

OpenBSD: cvs Multiple vulnerabilities

10 June 2004

While no exploits are known to exist for these bugs under OpenBSD at this time, some of the bugs have proven exploitable on other operating systems.

OpenBSD: cvs Heap overflow vulnerability

25 May 2004

Malignant clients can run arbitrary code on CVS servers.

OpenBSD: procfs Incorrect bounds checking vulnerability

13 May 2004

Incorrect bounds checking in several procfs functions could allow an unprivileged malicious user to read arbitrary kernel memory.