version 1.366, 2001/12/13 19:35:15 |
version 1.367, 2001/12/31 01:25:54 |
|
|
Systems running with IP-in-IP encapulation can be made to crash by |
Systems running with IP-in-IP encapulation can be made to crash by |
malformed packets.<br> |
malformed packets.<br> |
<a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.0/common/010_ipip.patch">A source code patch exists which remedies the problem</a>. |
<a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.0/common/010_ipip.patch">A source code patch exists which remedies the problem</a>. |
<a name=lpd> |
|
<p> |
<p> |
|
<a name=lpd> |
<li><font color=#009000><strong>008: SECURITY FIX: November 28, 2001</strong></font><br> |
<li><font color=#009000><strong>008: SECURITY FIX: November 28, 2001</strong></font><br> |
A security issue exists in the lpd daemon that may allow an attacker |
A security issue exists in the lpd daemon that may allow an attacker |
to create arbitrary new files in the root directory. Only machines |
to create arbitrary new files in the root directory. Only machines |