023: SECURITY FIX: March 5, 2003
A fix for an
lprm(1)
bug made in 1996 contains an error that could lead to privilege escalation.
--- 51,60 ----
!
All architectures
!
023: SECURITY FIX: March 5, 2003
A fix for an
lprm(1)
bug made in 1996 contains an error that could lead to privilege escalation.
***************
*** 63,69 ****
source code patch exists which remedies the problem.
!
022: SECURITY FIX: March 3, 2003
A buffer overflow in the envelope comments processing in
sendmail(8)
may allow an attacker to gain root privileges.
--- 63,69 ----
source code patch exists which remedies the problem.
!
022: SECURITY FIX: March 3, 2003
A buffer overflow in the envelope comments processing in
sendmail(8)
may allow an attacker to gain root privileges.
***************
*** 71,77 ****
source code patch exists which remedies the problem.
!
021: SECURITY FIX: February 23, 2003
In
ssl(8) an information leak can occur via timing by performing a MAC computation
even if incorrect block cipher padding has been found, this is a
--- 71,77 ----
source code patch exists which remedies the problem.
!
021: SECURITY FIX: February 23, 2003
In
ssl(8) an information leak can occur via timing by performing a MAC computation
even if incorrect block cipher padding has been found, this is a
***************
*** 80,86 ****
source code patch exists which fixes these two issues.
!
020: SECURITY FIX: January 20, 2003
A double free in
cvs(1)
could allow an attacker to execute code with the privileges of the
--- 80,86 ----
source code patch exists which fixes these two issues.
!
020: SECURITY FIX: January 20, 2003
A double free in
cvs(1)
could allow an attacker to execute code with the privileges of the
***************
*** 92,98 ****
source code patch exists which remedies the problem.
!
019: SECURITY FIX: November 14, 2002
A buffer overflow in
named(8)
could allow an attacker to execute code with the privileges of named.
--- 92,98 ----
source code patch exists which remedies the problem.
!
019: SECURITY FIX: November 14, 2002
A buffer overflow in
named(8)
could allow an attacker to execute code with the privileges of named.
***************
*** 102,108 ****
source code patch exists which remedies the problem.
!
018: SECURITY FIX: November 6, 2002
Incorrect argument checking in the
getrlimit(2)
system call may allow an attacker to crash the kernel.
--- 102,108 ----
source code patch exists which remedies the problem.
!
018: SECURITY FIX: November 6, 2002
Incorrect argument checking in the
getrlimit(2)
system call may allow an attacker to crash the kernel.
***************
*** 110,116 ****
source code patch exists which remedies the problem.
!
017: SECURITY FIX: November 6, 2002
An attacker can bypass the restrictions imposed by sendmail's restricted shell,
smrsh(8),
and execute arbitrary commands with the privileges of his own account.
--- 110,116 ----
source code patch exists which remedies the problem.
!
017: SECURITY FIX: November 6, 2002
An attacker can bypass the restrictions imposed by sendmail's restricted shell,
smrsh(8),
and execute arbitrary commands with the privileges of his own account.
***************
*** 118,137 ****
source code patch exists which remedies the problem.
014: SECURITY FIX: August 11, 2002
An insufficient boundary check in the
select(2)
system call allows an attacker to overwrite kernel memory and execute arbitrary
--- 118,137 ----
source code patch exists which remedies the problem.
014: SECURITY FIX: August 11, 2002
An insufficient boundary check in the
select(2)
system call allows an attacker to overwrite kernel memory and execute arbitrary
***************
*** 140,146 ****
source code patch exists which remedies the problem.
!
013: SECURITY FIX: July 30, 2002
Several remote buffer overflows can occur in the SSL2 server and SSL3 client of the
ssl(8)
library, as in the ASN.1 parser code in the
--- 140,146 ----
source code patch exists which remedies the problem.
!
013: SECURITY FIX: July 30, 2002
Several remote buffer overflows can occur in the SSL2 server and SSL3 client of the
ssl(8)
library, as in the ASN.1 parser code in the
***************
*** 151,171 ****
This is the second version of the patch.
008: SECURITY FIX: June 26, 2002
A buffer overflow can occur in the .htaccess parsing code in mod_ssl httpd
module, leading to possible remote crash or exploit. A source code patch exists which remedies the problem.
006: SECURITY FIX: June 24, 2002
All versions of OpenSSH's sshd between 2.3.1 and 3.3 contain an input validation
error that can result in an integer overflow and privilege escalation.
This problem is fixed in OpenSSH
--- 173,195 ----
This is the second version of the patch.
008: SECURITY FIX: June 26, 2002
A buffer overflow can occur in the .htaccess parsing code in mod_ssl httpd
module, leading to possible remote crash or exploit. A source code patch exists which remedies the problem.
006: SECURITY FIX: June 24, 2002
All versions of OpenSSH's sshd between 2.3.1 and 3.3 contain an input validation
error that can result in an integer overflow and privilege escalation.
This problem is fixed in OpenSSH
***************
*** 197,212 ****
security advisory.
!
005: SECURITY FIX: June 19, 2002
A buffer overflow can occur during the interpretation of chunked
encoding in the http daemon, leading to possible remote crash or exploit. A source code patch exists which remedies the problem.
!
004: SECURITY FIX: May 22, 2002
Under certain conditions, on systems using YP with netgroups in the
password database, it is possible that
! sshd(8)
does ACL checks for the requested user name but uses the password
database entry of a different user for authentication. This means
that denied users might authenticate successfully while permitted
--- 197,212 ----
security advisory.
!
005: SECURITY FIX: June 19, 2002
A buffer overflow can occur during the interpretation of chunked
encoding in the http daemon, leading to possible remote crash or exploit. A source code patch exists which remedies the problem.
!
004: SECURITY FIX: May 22, 2002
Under certain conditions, on systems using YP with netgroups in the
password database, it is possible that
! sshd(8)
does ACL checks for the requested user name but uses the password
database entry of a different user for authentication. This means
that denied users might authenticate successfully while permitted
***************
*** 214,234 ****
A source code patch exists which remedies the problem.
!
003: SECURITY FIX: May 8, 2002
A race condition exists where an attacker could fill the file descriptor
table and defeat the kernel's protection of fd slots 0, 1, and 2 for a
setuid or setgid process. A source code patch exists which remedies the problem.
001: SECURITY FIX: April 22, 2002
A local user can gain super-user privileges due to a buffer overflow
! in sshd(8)
if AFS has been configured on the system or if
KerberosTgtPassing or AFSTokenPassing has been enabled
in the sshd_config file. Ticket and token passing is not enabled
--- 214,234 ----
A source code patch exists which remedies the problem.
!
003: SECURITY FIX: May 8, 2002
A race condition exists where an attacker could fill the file descriptor
table and defeat the kernel's protection of fd slots 0, 1, and 2 for a
setuid or setgid process. A source code patch exists which remedies the problem.
001: SECURITY FIX: April 22, 2002
A local user can gain super-user privileges due to a buffer overflow
! in sshd(8)
if AFS has been configured on the system or if
KerberosTgtPassing or AFSTokenPassing has been enabled
in the sshd_config file. Ticket and token passing is not enabled
***************
*** 238,298 ****
![[OpenBSD]](images/smalltitle.gif){kind=small}
! www@openbsd.org
!