[BACK]Return to errata31.html CVS log [TXT][DIR] Up to [local] / www

Diff for /www/errata31.html between version 1.72 and 1.73

version 1.72, 2016/03/21 05:46:20 version 1.73, 2016/03/22 10:54:42
Line 87 
Line 87 
 <font color="#009000"><strong>027: SECURITY FIX: March 31, 2003</strong></font>  <font color="#009000"><strong>027: SECURITY FIX: March 31, 2003</strong></font>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 A buffer overflow in the address parsing in  A buffer overflow in the address parsing in
 <a href="http://man.openbsd.org?query=sendmail&amp;sektion=8">sendmail(8)</a>  <a href="http://man.openbsd.org/?query=sendmail&amp;sektion=8">sendmail(8)</a>
 may allow an attacker to gain root privileges.<br>  may allow an attacker to gain root privileges.<br>
 <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/027_sendmail.patch">  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/027_sendmail.patch">
 A source code patch exists which remedies this problem.</a>  A source code patch exists which remedies this problem.</a>
Line 122 
Line 122 
 <font color="#009000"><strong>023: SECURITY FIX: March 5, 2003</strong></font>  <font color="#009000"><strong>023: SECURITY FIX: March 5, 2003</strong></font>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 A fix for an  A fix for an
 <a href="http://man.openbsd.org?query=lprm&amp;sektion=1">lprm(1)</a>  <a href="http://man.openbsd.org/?query=lprm&amp;sektion=1">lprm(1)</a>
 bug made in 1996 contains an error that could lead to privilege escalation.  bug made in 1996 contains an error that could lead to privilege escalation.
 <br>  <br>
 <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/023_lprm.patch">  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/023_lprm.patch">
Line 132 
Line 132 
 <font color="#009000"><strong>022: SECURITY FIX: March 3, 2003</strong></font>  <font color="#009000"><strong>022: SECURITY FIX: March 3, 2003</strong></font>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 A buffer overflow in the envelope comments processing in  A buffer overflow in the envelope comments processing in
 <a href="http://man.openbsd.org?query=sendmail&amp;sektion=8">sendmail(8)</a>  <a href="http://man.openbsd.org/?query=sendmail&amp;sektion=8">sendmail(8)</a>
 may allow an attacker to gain root privileges.<br>  may allow an attacker to gain root privileges.<br>
 <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/022_sendmail.patch">  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/022_sendmail.patch">
 A source code patch exists which remedies this problem.</a>  A source code patch exists which remedies this problem.</a>
Line 141 
Line 141 
 <font color="#009000"><strong>021: SECURITY FIX: February 23, 2003</strong></font>  <font color="#009000"><strong>021: SECURITY FIX: February 23, 2003</strong></font>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 In  In
 <a href="http://man.openbsd.org?query=ssl&amp;sektion=8">ssl(8)</a> an information leak can occur via timing by performing a MAC computation  <a href="http://man.openbsd.org/?query=ssl&amp;sektion=8">ssl(8)</a> an information leak can occur via timing by performing a MAC computation
 even if incorrect block cipher padding has been found, this is a  even if incorrect block cipher padding has been found, this is a
 countermeasure. Also, check for negative sizes in memory allocation routines.<br>  countermeasure. Also, check for negative sizes in memory allocation routines.<br>
 <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/021_ssl.patch">  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/021_ssl.patch">
Line 151 
Line 151 
 <font color="#009000"><strong>020: SECURITY FIX: January 20, 2003</strong></font>  <font color="#009000"><strong>020: SECURITY FIX: January 20, 2003</strong></font>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 A double free in  A double free in
 <a href="http://man.openbsd.org?query=cvs&amp;sektion=1">cvs(1)</a>  <a href="http://man.openbsd.org/?query=cvs&amp;sektion=1">cvs(1)</a>
 could allow an attacker to execute code with the privileges of the  could allow an attacker to execute code with the privileges of the
 user running cvs.  This is only an issue when the cvs command is  user running cvs.  This is only an issue when the cvs command is
 being run on a user's behalf as a different user.  This means that,  being run on a user's behalf as a different user.  This means that,
Line 164 
Line 164 
 <font color="#009000"><strong>019: SECURITY FIX: November 14, 2002</strong></font>  <font color="#009000"><strong>019: SECURITY FIX: November 14, 2002</strong></font>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 A buffer overflow in  A buffer overflow in
 <a href="http://man.openbsd.org?query=named&amp;sektion=8">named(8)</a>  <a href="http://man.openbsd.org/?query=named&amp;sektion=8">named(8)</a>
 could allow an attacker to execute code with the privileges of named.  could allow an attacker to execute code with the privileges of named.
 On OpenBSD, named runs as a non-root user in a chrooted environment  On OpenBSD, named runs as a non-root user in a chrooted environment
 which mitigates the effects of this bug.<br>  which mitigates the effects of this bug.<br>
Line 175 
Line 175 
 <font color="#009000"><strong>018: SECURITY FIX: November 6, 2002</strong></font>  <font color="#009000"><strong>018: SECURITY FIX: November 6, 2002</strong></font>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 Incorrect argument checking in the  Incorrect argument checking in the
 <a href="http://man.openbsd.org?query=getrlimit&amp;sektion=2">getrlimit(2)</a>  <a href="http://man.openbsd.org/?query=getrlimit&amp;sektion=2">getrlimit(2)</a>
 system call may allow an attacker to crash the kernel.<br>  system call may allow an attacker to crash the kernel.<br>
 <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/018_kernresource.patch">  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/018_kernresource.patch">
 A source code patch exists which remedies this problem.</a>  A source code patch exists which remedies this problem.</a>
Line 184 
Line 184 
 <font color="#009000"><strong>017: SECURITY FIX: November 6, 2002</strong></font>  <font color="#009000"><strong>017: SECURITY FIX: November 6, 2002</strong></font>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 An attacker can bypass the restrictions imposed by sendmail's restricted shell,  An attacker can bypass the restrictions imposed by sendmail's restricted shell,
 <a href="http://man.openbsd.org?query=smrsh&amp;sektion=8">smrsh(8)</a>,  <a href="http://man.openbsd.org/?query=smrsh&amp;sektion=8">smrsh(8)</a>,
 and execute arbitrary commands with the privileges of his own account.<br>  and execute arbitrary commands with the privileges of his own account.<br>
 <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/017_smrsh.patch">  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/017_smrsh.patch">
 A source code patch exists which remedies this problem.</a>  A source code patch exists which remedies this problem.</a>
Line 193 
Line 193 
 <font color="#009000"><strong>016: SECURITY FIX: October 21, 2002</strong></font>  <font color="#009000"><strong>016: SECURITY FIX: October 21, 2002</strong></font>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 A buffer overflow can occur in the  A buffer overflow can occur in the
 <a href="http://man.openbsd.org?query=kadmind&amp;sektion=8">kadmind(8)</a>  <a href="http://man.openbsd.org/?query=kadmind&amp;sektion=8">kadmind(8)</a>
 daemon, leading to possible remote crash or exploit.<br>  daemon, leading to possible remote crash or exploit.<br>
 <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/016_kadmin.patch">  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/016_kadmin.patch">
 A source code patch exists which remedies this problem.</a>  A source code patch exists which remedies this problem.</a>
Line 202 
Line 202 
 <font color="#009000"><strong>015: SECURITY FIX: October 2, 2002</strong></font>  <font color="#009000"><strong>015: SECURITY FIX: October 2, 2002</strong></font>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 Incorrect argument checking in the  Incorrect argument checking in the
 <a href="http://man.openbsd.org?query=setitimer&amp;sektion=2">setitimer(2)</a> system call may allow an attacker to write to kernel memory.<br>  <a href="http://man.openbsd.org/?query=setitimer&amp;sektion=2">setitimer(2)</a> system call may allow an attacker to write to kernel memory.<br>
 <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/015_kerntime.patch">  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/015_kerntime.patch">
 A source code patch exists which remedies this problem.</a>  A source code patch exists which remedies this problem.</a>
 <p>  <p>
Line 210 
Line 210 
 <font color="#009000"><strong>014: SECURITY FIX: August 11, 2002</strong></font>  <font color="#009000"><strong>014: SECURITY FIX: August 11, 2002</strong></font>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 An insufficient boundary check in the  An insufficient boundary check in the
 <a href="http://man.openbsd.org?query=select&amp;sektion=2">select(2)</a>  <a href="http://man.openbsd.org/?query=select&amp;sektion=2">select(2)</a>
 system call allows an attacker to overwrite kernel memory and execute arbitrary  system call allows an attacker to overwrite kernel memory and execute arbitrary
 code in kernel context.<br>  code in kernel context.<br>
 <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/014_scarg.patch">  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/014_scarg.patch">
Line 220 
Line 220 
 <font color="#009000"><strong>013: SECURITY FIX: July 30, 2002</strong></font>  <font color="#009000"><strong>013: SECURITY FIX: July 30, 2002</strong></font>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 Several remote buffer overflows can occur in the SSL2 server and SSL3 client of the  Several remote buffer overflows can occur in the SSL2 server and SSL3 client of the
 <a href="http://man.openbsd.org?query=ssl&amp;sektion=8">ssl(8)</a>  <a href="http://man.openbsd.org/?query=ssl&amp;sektion=8">ssl(8)</a>
 library, as in the ASN.1 parser code in the  library, as in the ASN.1 parser code in the
 <a href="http://man.openbsd.org?query=crypto&amp;sektion=3">crypto(3)</a>  <a href="http://man.openbsd.org/?query=crypto&amp;sektion=3">crypto(3)</a>
 library, all of them being potentially remotely exploitable.<br>  library, all of them being potentially remotely exploitable.<br>
 <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/013_ssl.patch">  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/013_ssl.patch">
 A source code patch exists which remedies this problem.</a>  A source code patch exists which remedies this problem.</a>
Line 233 
Line 233 
 <font color="#009000"><strong>012: SECURITY FIX: July 29, 2002</strong></font>  <font color="#009000"><strong>012: SECURITY FIX: July 29, 2002</strong></font>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 A buffer overflow can occur in the  A buffer overflow can occur in the
 <a href="http://man.openbsd.org?query=xdr_array&amp;sektion=3">xdr_array(3)</a>  <a href="http://man.openbsd.org/?query=xdr_array&amp;sektion=3">xdr_array(3)</a>
 RPC code, leading to possible remote crash.<br>  RPC code, leading to possible remote crash.<br>
 <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/012_xdr.patch">  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/012_xdr.patch">
 A source code patch exists which remedies this problem.</a>  A source code patch exists which remedies this problem.</a>
Line 244 
Line 244 
 <font color="#009000"><strong>011: SECURITY FIX: July 29, 2002</strong></font>  <font color="#009000"><strong>011: SECURITY FIX: July 29, 2002</strong></font>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 A race condition exists in the  A race condition exists in the
 <a href="http://man.openbsd.org?query=pppd&amp;sektion=8">pppd(8)</a>  <a href="http://man.openbsd.org/?query=pppd&amp;sektion=8">pppd(8)</a>
 daemon which may cause it to alter the file permissions of an arbitrary file.<br>  daemon which may cause it to alter the file permissions of an arbitrary file.<br>
 <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/011_pppd.patch">  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/011_pppd.patch">
 A source code patch exists which remedies this problem.</a>  A source code patch exists which remedies this problem.</a>
Line 253 
Line 253 
 <font color="#009000"><strong>010: RELIABILITY FIX: July 5, 2002</strong></font>  <font color="#009000"><strong>010: RELIABILITY FIX: July 5, 2002</strong></font>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 Receiving IKE payloads out of sequence can cause  Receiving IKE payloads out of sequence can cause
 <a href="http://man.openbsd.org?query=isakmpd&amp;sektion=8">isakmpd(8)</a> to crash.<br>  <a href="http://man.openbsd.org/?query=isakmpd&amp;sektion=8">isakmpd(8)</a> to crash.<br>
 <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/010_isakmpd.patch">  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/010_isakmpd.patch">
 A source code patch exists which remedies this problem.</a>  A source code patch exists which remedies this problem.</a>
 <br>  <br>
Line 262 
Line 262 
 <li id="ktrace">  <li id="ktrace">
 <font color="#009000"><strong>009: SECURITY FIX: June 27, 2002</strong></font>  <font color="#009000"><strong>009: SECURITY FIX: June 27, 2002</strong></font>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 The kernel would let any user <a href="http://man.openbsd.org?query=ktrace&amp;sektion=2">ktrace(2)</a> set[ug]id processes.<br>  The kernel would let any user <a href="http://man.openbsd.org/?query=ktrace&amp;sektion=2">ktrace(2)</a> set[ug]id processes.<br>
 <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/009_ktrace.patch">  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/009_ktrace.patch">
 A source code patch exists which remedies this problem.</a>  A source code patch exists which remedies this problem.</a>
 <p>  <p>
Line 303 
Line 303 
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 Under certain conditions, on systems using YP with netgroups in the  Under certain conditions, on systems using YP with netgroups in the
 password database, it is possible that  password database, it is possible that
 <a href="http://man.openbsd.org?query=sshd&amp;sektion=8">sshd(8)</a>  <a href="http://man.openbsd.org/?query=sshd&amp;sektion=8">sshd(8)</a>
 does ACL checks for the requested user name but uses the password  does ACL checks for the requested user name but uses the password
 database entry of a different user for authentication.  This means  database entry of a different user for authentication.  This means
 that denied users might authenticate successfully while permitted  that denied users might authenticate successfully while permitted
Line 323 
Line 323 
 <li id="sudo">  <li id="sudo">
 <font color="#009000"><strong>002: SECURITY FIX: April 25, 2002</strong></font>  <font color="#009000"><strong>002: SECURITY FIX: April 25, 2002</strong></font>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 A bug in <a href="http://man.openbsd.org?query=sudo&amp;sektion=8">sudo(8)</a> may allow an attacker to corrupt the heap by specifying a custom prompt.<br>  A bug in <a href="http://man.openbsd.org/?query=sudo&amp;sektion=8">sudo(8)</a> may allow an attacker to corrupt the heap by specifying a custom prompt.<br>
 <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/002_sudo.patch">  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/002_sudo.patch">
 A source code patch exists which remedies this problem.</a>  A source code patch exists which remedies this problem.</a>
 <p>  <p>
Line 331 
Line 331 
 <font color="#009000"><strong>001: SECURITY FIX: April 22, 2002</strong></font>  <font color="#009000"><strong>001: SECURITY FIX: April 22, 2002</strong></font>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 A local user can gain super-user privileges due to a buffer overflow  A local user can gain super-user privileges due to a buffer overflow
 in <a href="http://man.openbsd.org?query=sshd&amp;sektion=8">sshd(8)</a>  in <a href="http://man.openbsd.org/?query=sshd&amp;sektion=8">sshd(8)</a>
 if AFS has been configured on the system or if  if AFS has been configured on the system or if
 KerberosTgtPassing or AFSTokenPassing has been enabled  KerberosTgtPassing or AFSTokenPassing has been enabled
 in the sshd_config file.  Ticket and token passing is not enabled  in the sshd_config file.  Ticket and token passing is not enabled
Legend:
Removed from v.1.72  
changed lines
  Added in v.1.73