www/errata28.html - diff

Return to errata28.html CVS log

Up to [local] / www

Diff for /www/errata28.html between version 1.76 and 1.77

version 1.76, 2016/02/20 14:18:42

version 1.77, 2016/03/21 05:46:19

Line 85

033: SECURITY FIX: September 11, 2001

All architectures

A security hole exists in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=uuxqt&sektion=8">uuxqt(8)</a>

A security hole exists in <a href="http://man.openbsd.org?query=uuxqt&sektion=8">uuxqt(8)</a>

that may allow an attacker to run arbitrary commands as user uucp and

use this to gain root access.

The UUCP execution daemon, uuxqt(8), has a bug in its command line

Line 99

032: SECURITY FIX: August 29, 2001

All architectures

A security hole exists in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lpd&sektion=8">lpd(8)</a>

A security hole exists in <a href="http://man.openbsd.org?query=lpd&sektion=8">lpd(8)</a>

that may allow an attacker with line printer access to gain root

privileges. A machine must be running lpd to be vulnerable (OpenBSD

does not start lpd by default). Only machines with line printer

Line 112

031: SECURITY FIX: August 21, 2001

All architectures

A security hole exists in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sendmail&sektion=8">sendmail(8)</a>

A security hole exists in <a href="http://man.openbsd.org?query=sendmail&sektion=8">sendmail(8)</a>

that may allow an attacker on the local host to gain root privileges by

specifying out-of-bounds debug parameters.

Line 122

030: SECURITY FIX: June 15, 2001

All architectures

A race condition exists in the kernel <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=execve&sektion=2&format=html">execve(2)</a> implementation that opens a small window of vulnerability for a non-privileged user to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ptrace&sektion=2&format=html">ptrace(2)</a> attach to a suid/sgid process.

A race condition exists in the kernel <a href="http://man.openbsd.org?query=execve&sektion=2&format=html">execve(2)</a> implementation that opens a small window of vulnerability for a non-privileged user to <a href="http://man.openbsd.org?query=ptrace&sektion=2&format=html">ptrace(2)</a> attach to a suid/sgid process.

A source code patch exists which remedies this problem.</a>

Line 130

029: SECURITY FIX: May 30, 2001

All architectures

Programs using the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fts&sektion=3&format=html">fts(3)</a>

Programs using the <a href="http://man.openbsd.org?query=fts&sektion=3&format=html">fts(3)</a>

routines (such as rm, find, and most programs that take a -R

flag) can be tricked into changing into the wrong directory if the

parent dir is changed out from underneath it. This is similar to

Line 143

028: SECURITY FIX: May 29, 2001

All architectures

The signal handlers in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sen

The signal handlers in <a href="http://man.openbsd.org?query=sen

dmail&sektion=8&format=html">sendmail(8)</a> contain code that is unsafe in the

context of a signal handler. This leads to potentially serious

race conditions. At the moment this is a theoretical attack only

Line 162

026: SECURITY FIX: Apr 23, 2001

All architectures

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=glob&sektion=3">ftpd(8)</a> has a potential DoS related to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=glob&sektion=3">glob(3)</a>. This patch introduces a GLOB_LIMIT, eliminating the DoS. You must have <a href="#glob">025_glob.patch</a> installed before installing this patch.

<a href="http://man.openbsd.org?query=glob&sektion=3">ftpd(8)</a> has a potential DoS related to <a href="http://man.openbsd.org?query=glob&sektion=3">glob(3)</a>. This patch introduces a GLOB_LIMIT, eliminating the DoS. You must have <a href="#glob">025_glob.patch</a> installed before installing this patch.

A source code patch exists which remedies this problem.</a>

025: SECURITY FIX: Apr 10, 2001

All architectures

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=glob&sektion=3">glob(3)</a> contains multiple buffer overflows.

<a href="http://man.openbsd.org?query=glob&sektion=3">glob(3)</a> contains multiple buffer overflows.

A source code patch exists which remedies this problem.</a>

Line 178

All architectures

The readline library shipped with OpenBSD allows history files creation

with a permissive

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=umask&sektion=2">umask(2)</a>.

<a href="http://man.openbsd.org?query=umask&sektion=2">umask(2)</a>.

This can lead to the leakage of sensitive information in applications

that use passwords and the like during user interaction (one such

application is mysql).

Line 202

021: SECURITY FIX: Feb 22, 2001

All architectures

There is an exploitable heap corruption bug in

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sudo&sektion=8">sudo</a>.

<a href="http://man.openbsd.org?query=sudo&sektion=8">sudo</a>.

A source code patch exists which remedies this problem.</a>

Line 210

020: IMPLEMENTATION FIX: Feb 15, 2001

All architectures

Client side ident protocol was broken in libwrap, affecting anything using libwrap including <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpd&sektion=8">tcpd</a>. The effect of this was that libwrap would never retrieve and log ident values from remote hosts on connections.

Client side ident protocol was broken in libwrap, affecting anything using libwrap including <a href="http://man.openbsd.org?query=tcpd&sektion=8">tcpd</a>. The effect of this was that libwrap would never retrieve and log ident values from remote hosts on connections.

A source code patch exists which remedies this problem.</a>

019: IMPLEMENTATION FIX: Jan 31, 2001

All architectures

Fix memory allocation in the PCI LANCE driver, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=le&sektion=4&arch=i386">le</a>. A side effect of this is that OpenBSD under VMWare now works again.

Fix memory allocation in the PCI LANCE driver, <a href="http://man.openbsd.org?query=le&sektion=4&arch=i386">le</a>. A side effect of this is that OpenBSD under VMWare now works again.

A source code patch exists which remedies this problem.</a>

018: SECURITY FIX: Jan 29, 2001

All architectures

Merge <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=named&sektion=8">named</a>

Merge <a href="http://man.openbsd.org?query=named&sektion=8">named</a>

with ISC BIND 4.9.8-REL, which fixes some buffer vulnerabilities (actually it appears

that these were already impossible to exploit beforehand).

Line 233

017: SECURITY FIX: Jan 22, 2001

All architectures

The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=random&sektion=4">rnd(4)</a> device does not use all of its input when data is written to it.

The <a href="http://man.openbsd.org?query=random&sektion=4">rnd(4)</a> device does not use all of its input when data is written to it.

A source code patch exists which remedies this problem.</a>

Line 273

013: SECURITY FIX: Dec 18, 2000

All architectures

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mount_procfs&sektion=8">Procfs</a> contained numerous overflows, which could lead an intruder to root permissions. Procfs is NOT enabled by default in OpenBSD.

<a href="http://man.openbsd.org?query=mount_procfs&sektion=8">Procfs</a> contained numerous overflows, which could lead an intruder to root permissions. Procfs is NOT enabled by default in OpenBSD.

A source code patch exists which remedies this problem.</a>