[BACK]Return to errata31.html CVS log [TXT][DIR] Up to [local] / www

Diff for /www/errata31.html between version 1.81 and 1.82

version 1.81, 2017/03/28 04:04:52 version 1.82, 2017/03/28 06:41:18
Line 86 
Line 86 
 <font color="#009000"><strong>027: SECURITY FIX: March 31, 2003</strong></font>  <font color="#009000"><strong>027: SECURITY FIX: March 31, 2003</strong></font>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 A buffer overflow in the address parsing in  A buffer overflow in the address parsing in
 <a href="http://man.openbsd.org/?query=sendmail&amp;sektion=8">sendmail(8)</a>  <a href="http://man.openbsd.org/OpenBSD-3.1/sendmail.8">sendmail(8)</a>
 may allow an attacker to gain root privileges.<br>  may allow an attacker to gain root privileges.<br>
 <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/027_sendmail.patch">  <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/027_sendmail.patch">
 A source code patch exists which remedies this problem.</a>  A source code patch exists which remedies this problem.</a>
Line 121 
Line 121 
 <font color="#009000"><strong>023: SECURITY FIX: March 5, 2003</strong></font>  <font color="#009000"><strong>023: SECURITY FIX: March 5, 2003</strong></font>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 A fix for an  A fix for an
 <a href="http://man.openbsd.org/?query=lprm&amp;sektion=1">lprm(1)</a>  <a href="http://man.openbsd.org/OpenBSD-3.1/lprm.1">lprm(1)</a>
 bug made in 1996 contains an error that could lead to privilege escalation.  bug made in 1996 contains an error that could lead to privilege escalation.
 <br>  <br>
 <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/023_lprm.patch">  <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/023_lprm.patch">
Line 131 
Line 131 
 <font color="#009000"><strong>022: SECURITY FIX: March 3, 2003</strong></font>  <font color="#009000"><strong>022: SECURITY FIX: March 3, 2003</strong></font>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 A buffer overflow in the envelope comments processing in  A buffer overflow in the envelope comments processing in
 <a href="http://man.openbsd.org/?query=sendmail&amp;sektion=8">sendmail(8)</a>  <a href="http://man.openbsd.org/OpenBSD-3.1/sendmail.8">sendmail(8)</a>
 may allow an attacker to gain root privileges.<br>  may allow an attacker to gain root privileges.<br>
 <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/022_sendmail.patch">  <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/022_sendmail.patch">
 A source code patch exists which remedies this problem.</a>  A source code patch exists which remedies this problem.</a>
Line 140 
Line 140 
 <font color="#009000"><strong>021: SECURITY FIX: February 23, 2003</strong></font>  <font color="#009000"><strong>021: SECURITY FIX: February 23, 2003</strong></font>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 In  In
 <a href="http://man.openbsd.org/?query=ssl&amp;sektion=8">ssl(8)</a> an information leak can occur via timing by performing a MAC computation  <a href="http://man.openbsd.org/OpenBSD-3.1/ssl.8">ssl(8)</a> an information leak can occur via timing by performing a MAC computation
 even if incorrect block cipher padding has been found, this is a  even if incorrect block cipher padding has been found, this is a
 countermeasure. Also, check for negative sizes in memory allocation routines.<br>  countermeasure. Also, check for negative sizes in memory allocation routines.<br>
 <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/021_ssl.patch">  <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/021_ssl.patch">
Line 150 
Line 150 
 <font color="#009000"><strong>020: SECURITY FIX: January 20, 2003</strong></font>  <font color="#009000"><strong>020: SECURITY FIX: January 20, 2003</strong></font>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 A double free in  A double free in
 <a href="http://man.openbsd.org/?query=cvs&amp;sektion=1">cvs(1)</a>  <a href="http://man.openbsd.org/OpenBSD-3.1/cvs.1">cvs(1)</a>
 could allow an attacker to execute code with the privileges of the  could allow an attacker to execute code with the privileges of the
 user running cvs.  This is only an issue when the cvs command is  user running cvs.  This is only an issue when the cvs command is
 being run on a user's behalf as a different user.  This means that,  being run on a user's behalf as a different user.  This means that,
Line 163 
Line 163 
 <font color="#009000"><strong>019: SECURITY FIX: November 14, 2002</strong></font>  <font color="#009000"><strong>019: SECURITY FIX: November 14, 2002</strong></font>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 A buffer overflow in  A buffer overflow in
 <a href="http://man.openbsd.org/?query=named&amp;sektion=8">named(8)</a>  <a href="http://man.openbsd.org/OpenBSD-3.1/named.8">named(8)</a>
 could allow an attacker to execute code with the privileges of named.  could allow an attacker to execute code with the privileges of named.
 On OpenBSD, named runs as a non-root user in a chrooted environment  On OpenBSD, named runs as a non-root user in a chrooted environment
 which mitigates the effects of this bug.<br>  which mitigates the effects of this bug.<br>
Line 174 
Line 174 
 <font color="#009000"><strong>018: SECURITY FIX: November 6, 2002</strong></font>  <font color="#009000"><strong>018: SECURITY FIX: November 6, 2002</strong></font>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 Incorrect argument checking in the  Incorrect argument checking in the
 <a href="http://man.openbsd.org/?query=getrlimit&amp;sektion=2">getrlimit(2)</a>  <a href="http://man.openbsd.org/OpenBSD-3.1/getrlimit.2">getrlimit(2)</a>
 system call may allow an attacker to crash the kernel.<br>  system call may allow an attacker to crash the kernel.<br>
 <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/018_kernresource.patch">  <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/018_kernresource.patch">
 A source code patch exists which remedies this problem.</a>  A source code patch exists which remedies this problem.</a>
Line 183 
Line 183 
 <font color="#009000"><strong>017: SECURITY FIX: November 6, 2002</strong></font>  <font color="#009000"><strong>017: SECURITY FIX: November 6, 2002</strong></font>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 An attacker can bypass the restrictions imposed by sendmail's restricted shell,  An attacker can bypass the restrictions imposed by sendmail's restricted shell,
 <a href="http://man.openbsd.org/?query=smrsh&amp;sektion=8">smrsh(8)</a>,  <a href="http://man.openbsd.org/OpenBSD-3.1/smrsh.8">smrsh(8)</a>,
 and execute arbitrary commands with the privileges of his own account.<br>  and execute arbitrary commands with the privileges of his own account.<br>
 <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/017_smrsh.patch">  <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/017_smrsh.patch">
 A source code patch exists which remedies this problem.</a>  A source code patch exists which remedies this problem.</a>
Line 192 
Line 192 
 <font color="#009000"><strong>016: SECURITY FIX: October 21, 2002</strong></font>  <font color="#009000"><strong>016: SECURITY FIX: October 21, 2002</strong></font>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 A buffer overflow can occur in the  A buffer overflow can occur in the
 <a href="http://man.openbsd.org/?query=kadmind&amp;sektion=8">kadmind(8)</a>  <a href="http://man.openbsd.org/OpenBSD-3.1/kadmind.8">kadmind(8)</a>
 daemon, leading to possible remote crash or exploit.<br>  daemon, leading to possible remote crash or exploit.<br>
 <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/016_kadmin.patch">  <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/016_kadmin.patch">
 A source code patch exists which remedies this problem.</a>  A source code patch exists which remedies this problem.</a>
Line 201 
Line 201 
 <font color="#009000"><strong>015: SECURITY FIX: October 2, 2002</strong></font>  <font color="#009000"><strong>015: SECURITY FIX: October 2, 2002</strong></font>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 Incorrect argument checking in the  Incorrect argument checking in the
 <a href="http://man.openbsd.org/?query=setitimer&amp;sektion=2">setitimer(2)</a> system call may allow an attacker to write to kernel memory.<br>  <a href="http://man.openbsd.org/OpenBSD-3.1/setitimer.2">setitimer(2)</a> system call may allow an attacker to write to kernel memory.<br>
 <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/015_kerntime.patch">  <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/015_kerntime.patch">
 A source code patch exists which remedies this problem.</a>  A source code patch exists which remedies this problem.</a>
 <p>  <p>
Line 209 
Line 209 
 <font color="#009000"><strong>014: SECURITY FIX: August 11, 2002</strong></font>  <font color="#009000"><strong>014: SECURITY FIX: August 11, 2002</strong></font>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 An insufficient boundary check in the  An insufficient boundary check in the
 <a href="http://man.openbsd.org/?query=select&amp;sektion=2">select(2)</a>  <a href="http://man.openbsd.org/OpenBSD-3.1/select.2">select(2)</a>
 system call allows an attacker to overwrite kernel memory and execute arbitrary  system call allows an attacker to overwrite kernel memory and execute arbitrary
 code in kernel context.<br>  code in kernel context.<br>
 <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/014_scarg.patch">  <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/014_scarg.patch">
Line 219 
Line 219 
 <font color="#009000"><strong>013: SECURITY FIX: July 30, 2002</strong></font>  <font color="#009000"><strong>013: SECURITY FIX: July 30, 2002</strong></font>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 Several remote buffer overflows can occur in the SSL2 server and SSL3 client of the  Several remote buffer overflows can occur in the SSL2 server and SSL3 client of the
 <a href="http://man.openbsd.org/?query=ssl&amp;sektion=8">ssl(8)</a>  <a href="http://man.openbsd.org/OpenBSD-3.1/ssl.8">ssl(8)</a>
 library, as in the ASN.1 parser code in the  library, as in the ASN.1 parser code in the
 <a href="http://man.openbsd.org/?query=crypto&amp;sektion=3">crypto(3)</a>  <a href="http://man.openbsd.org/OpenBSD-3.1/crypto.3">crypto(3)</a>
 library, all of them being potentially remotely exploitable.<br>  library, all of them being potentially remotely exploitable.<br>
 <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/013_ssl.patch">  <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/013_ssl.patch">
 A source code patch exists which remedies this problem.</a>  A source code patch exists which remedies this problem.</a>
Line 232 
Line 232 
 <font color="#009000"><strong>012: SECURITY FIX: July 29, 2002</strong></font>  <font color="#009000"><strong>012: SECURITY FIX: July 29, 2002</strong></font>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 A buffer overflow can occur in the  A buffer overflow can occur in the
 <a href="http://man.openbsd.org/?query=xdr_array&amp;sektion=3">xdr_array(3)</a>  <a href="http://man.openbsd.org/OpenBSD-3.1/xdr_array.3">xdr_array(3)</a>
 RPC code, leading to possible remote crash.<br>  RPC code, leading to possible remote crash.<br>
 <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/012_xdr.patch">  <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/012_xdr.patch">
 A source code patch exists which remedies this problem.</a>  A source code patch exists which remedies this problem.</a>
Line 243 
Line 243 
 <font color="#009000"><strong>011: SECURITY FIX: July 29, 2002</strong></font>  <font color="#009000"><strong>011: SECURITY FIX: July 29, 2002</strong></font>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 A race condition exists in the  A race condition exists in the
 <a href="http://man.openbsd.org/?query=pppd&amp;sektion=8">pppd(8)</a>  <a href="http://man.openbsd.org/OpenBSD-3.1/pppd.8">pppd(8)</a>
 daemon which may cause it to alter the file permissions of an arbitrary file.<br>  daemon which may cause it to alter the file permissions of an arbitrary file.<br>
 <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/011_pppd.patch">  <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/011_pppd.patch">
 A source code patch exists which remedies this problem.</a>  A source code patch exists which remedies this problem.</a>
Line 252 
Line 252 
 <font color="#009000"><strong>010: RELIABILITY FIX: July 5, 2002</strong></font>  <font color="#009000"><strong>010: RELIABILITY FIX: July 5, 2002</strong></font>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 Receiving IKE payloads out of sequence can cause  Receiving IKE payloads out of sequence can cause
 <a href="http://man.openbsd.org/?query=isakmpd&amp;sektion=8">isakmpd(8)</a> to crash.<br>  <a href="http://man.openbsd.org/OpenBSD-3.1/isakmpd.8">isakmpd(8)</a> to crash.<br>
 <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/010_isakmpd.patch">  <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/010_isakmpd.patch">
 A source code patch exists which remedies this problem.</a>  A source code patch exists which remedies this problem.</a>
 <br>  <br>
Line 261 
Line 261 
 <li id="ktrace">  <li id="ktrace">
 <font color="#009000"><strong>009: SECURITY FIX: June 27, 2002</strong></font>  <font color="#009000"><strong>009: SECURITY FIX: June 27, 2002</strong></font>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 The kernel would let any user <a href="http://man.openbsd.org/?query=ktrace&amp;sektion=2">ktrace(2)</a> set[ug]id processes.<br>  The kernel would let any user <a href="http://man.openbsd.org/OpenBSD-3.1/ktrace.2">ktrace(2)</a> set[ug]id processes.<br>
 <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/009_ktrace.patch">  <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/009_ktrace.patch">
 A source code patch exists which remedies this problem.</a>  A source code patch exists which remedies this problem.</a>
 <p>  <p>
Line 302 
Line 302 
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 Under certain conditions, on systems using YP with netgroups in the  Under certain conditions, on systems using YP with netgroups in the
 password database, it is possible that  password database, it is possible that
 <a href="http://man.openbsd.org/?query=sshd&amp;sektion=8">sshd(8)</a>  <a href="http://man.openbsd.org/OpenBSD-3.1/sshd.8">sshd(8)</a>
 does ACL checks for the requested user name but uses the password  does ACL checks for the requested user name but uses the password
 database entry of a different user for authentication.  This means  database entry of a different user for authentication.  This means
 that denied users might authenticate successfully while permitted  that denied users might authenticate successfully while permitted
Line 322 
Line 322 
 <li id="sudo">  <li id="sudo">
 <font color="#009000"><strong>002: SECURITY FIX: April 25, 2002</strong></font>  <font color="#009000"><strong>002: SECURITY FIX: April 25, 2002</strong></font>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 A bug in <a href="http://man.openbsd.org/?query=sudo&amp;sektion=8">sudo(8)</a> may allow an attacker to corrupt the heap by specifying a custom prompt.<br>  A bug in <a href="http://man.openbsd.org/OpenBSD-3.1/sudo.8">sudo(8)</a> may allow an attacker to corrupt the heap by specifying a custom prompt.<br>
 <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/002_sudo.patch">  <a href="https://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/002_sudo.patch">
 A source code patch exists which remedies this problem.</a>  A source code patch exists which remedies this problem.</a>
 <p>  <p>
Line 330 
Line 330 
 <font color="#009000"><strong>001: SECURITY FIX: April 22, 2002</strong></font>  <font color="#009000"><strong>001: SECURITY FIX: April 22, 2002</strong></font>
 &nbsp; <i>All architectures</i><br>  &nbsp; <i>All architectures</i><br>
 A local user can gain super-user privileges due to a buffer overflow  A local user can gain super-user privileges due to a buffer overflow
 in <a href="http://man.openbsd.org/?query=sshd&amp;sektion=8">sshd(8)</a>  in <a href="http://man.openbsd.org/OpenBSD-3.1/sshd.8">sshd(8)</a>
 if AFS has been configured on the system or if  if AFS has been configured on the system or if
 KerberosTgtPassing or AFSTokenPassing has been enabled  KerberosTgtPassing or AFSTokenPassing has been enabled
 in the sshd_config file.  Ticket and token passing is not enabled  in the sshd_config file.  Ticket and token passing is not enabled
Legend:
Removed from v.1.81  
changed lines
  Added in v.1.82