www/errata35.html - diff

Return to errata35.html CVS log

Up to [local] / www

Diff for /www/errata35.html between version 1.47 and 1.48

version 1.47, 2014/03/31 03:12:47

version 1.48, 2014/03/31 03:36:54

Line 76

<hr>

<h3>All architectures</h3>

<ul>

033: SECURITY FIX: April 28, 2005

033: SECURITY FIX: April 28, 2005   All architectures

Fix a buffer overflow, memory leaks, and NULL pointer dereference in

. None of these issues are known to be exploitable.

Line 92

Line 90

032: RELIABILITY FIX: April 4, 2005

032: RELIABILITY FIX: April 4, 2005   All architectures

Handle an edge condition in

timestamps.

Line 102

Line 100

031: SECURITY FIX: March 30, 2005

031: SECURITY FIX: March 30, 2005   All architectures

Due to buffer overflows in

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=telnet&apropos=0&sektion=1&manpath=OpenBSD+Current&arch=i386&format=html">telnet(1)</a>

, a malicious server or man-in-the-middle attack could allow execution of

Line 115

Line 113

030: RELIABILITY FIX: March 30, 2005

030: RELIABILITY FIX: March 30, 2005   All architectures

Bugs in the

stack can lead to memory exhaustion or processing of TCP segments with

Line 127

Line 125

027: RELIABILITY FIX: January 11, 2005

027: RELIABILITY FIX: January 11, 2005   All architectures

A bug in the

stack allows an invalid argument to be used in calculating the TCP

Line 139

Line 137

026: SECURITY FIX: January 12, 2005

026: SECURITY FIX: January 12, 2005   All architectures

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&apropos=0&sektion=8&manpath=OpenBSD+Current&arch=i386&format=html">httpd(8)</a>

's mod_include module fails to properly validate the length of

user supplied tag strings prior to copying them to a local buffer,

Line 153

Line 151

025: RELIABILITY FIX: January 6, 2005

025: RELIABILITY FIX: January 6, 2005   All architectures

The

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getcwd&apropos=0&sektion=3&manpath=OpenBSD+Current&arch=i386&format=html">getcwd(3)</a>

library function contains a memory management error, which causes failure

Line 164

Line 162

024: SECURITY FIX: December 14, 2004

024: SECURITY FIX: December 14, 2004   All architectures

On systems running

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&apropos=0&sektion=8&manpath=OpenBSD+Current&arch=i386&format=html">isakmpd(8)</a>

it is possible for a local user to cause kernel memory corruption

Line 176

Line 174

A source code patch exists which remedies this problem.</a>

023: RELIABILITY FIX: November 10, 2004

023: RELIABILITY FIX: November 10, 2004   All architectures

Due to a bug in

it is possible for pages such as

Line 189

Line 187

A source code patch exists which remedies this problem.</a>

022: RELIABILITY FIX: November 10, 2004

022: RELIABILITY FIX: November 10, 2004   All architectures

contains a bug that allows an attacker to crash his own connection, but it cannot

be used to deny service to other users.

Line 198

Line 196

A source code patch exists which remedies this problem.</a>

021: RELIABILITY FIX: November 10, 2004

021: RELIABILITY FIX: November 10, 2004   All architectures

BIND contains a bug which results in BIND trying to contact nameservers via IPv6, even in

cases where IPv6 connectivity is non-existent. This results in unnecessary timeouts and

thus slow DNS queries.

Line 207

Line 205

A source code patch exists which remedies this problem.</a>

020: SECURITY FIX: September 20, 2004

020: SECURITY FIX: September 20, 2004   All architectures

Eilko Bos reported that radius authentication, as implemented by

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=login_radius&apropos=0&sektion=8&manpath=OpenBSD+Current&arch=i386&format=html">login_radius(8)</a>,

was not checking the shared secret used for replies sent by the radius server.

Line 218

Line 216

A source code patch exists which remedies this problem.</a>

019: SECURITY FIX: September 16, 2004

019: SECURITY FIX: September 16, 2004   All architectures

Chris Evans reported several flaws (stack and integer overflows) in the

library code that parses image files

Line 231

Line 229

A source code patch exists which remedies this problem.</a>

018: SECURITY FIX: September 10, 2004

018: SECURITY FIX: September 10, 2004   All architectures

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&apropos=0&sektion=8&manpath=OpenBSD+Current&arch=i386&format=html">httpd(8)</a>

's mod_rewrite module can be made to write one zero byte in an arbitrary memory

position outside of a char array, causing a DoS or possibly buffer overflows.

Line 242

Line 240

A source code patch exists which remedies this problem.</a>

017: RELIABILITY FIX: August 29, 2004

017: RELIABILITY FIX: August 29, 2004   All architectures

Due to incorrect error handling in zlib an attacker could potentially cause a Denial

of Service attack.

Line 252

Line 250

A source code patch exists which remedies this problem.</a>

016: RELIABILITY FIX: August 26, 2004

016: RELIABILITY FIX: August 26, 2004   All architectures

<a href="http://marc.info/?l=bugtraq&m=109345131508824&w=2">reported</a>

by Vafa Izadinia

Line 263

Line 261

A source code patch exists which remedies this problem.</a>

015: RELIABILITY FIX: August 25, 2004

015: RELIABILITY FIX: August 25, 2004   All architectures

Improved verification of ICMP errors in order to minimize the impact of ICMP attacks

against TCP.

Line 273

Line 271

A source code patch exists which remedies this problem.</a>

014: RELIABILITY FIX: July 25, 2004

014: RELIABILITY FIX: July 25, 2004   All architectures

Under a certain network load the kernel can run out of stack space. This was

encountered in an environment using CARP on a VLAN interface. This issue initially

manifested itself as a FPU related crash on boot up.

Line 282

Line 280

A source code patch exists which remedies this problem.</a>

013: SECURITY FIX: June 12, 2004

013: SECURITY FIX: June 12, 2004   All architectures

Multiple vulnerabilities have been found in

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&apropos=0&sektion=8&manpath=OpenBSD+Current&arch=i386&format=html">httpd(8)</a>

/ mod_ssl.

Line 295

Line 293

A source code patch exists which remedies this problem.</a>

012: SECURITY FIX: June 10, 2004

012: SECURITY FIX: June 10, 2004   All architectures

<a href="http://seclists.org/lists/fulldisclosure/2004/Jun/0191.html">disclosed</a>

by Thomas Walpuski

Line 307

Line 305

A source code patch exists which remedies this problem.</a>

011: SECURITY FIX: June 9, 2004

011: SECURITY FIX: June 9, 2004   All architectures

Multiple remote vulnerabilities have been found in the

server that allow an attacker to crash the server or possibly execute arbitrary

Line 317

Line 315

A source code patch exists which remedies this problem.</a>

010: RELIABILITY FIX: June 9, 2004

010: RELIABILITY FIX: June 9, 2004   All architectures

A FIFO bug was introduced in OpenBSD 3.5 that occurs when a FIFO is opened in

non-blocking mode for writing when there are no processes reading the FIFO.

One program affected by this is the <a href="http://www.qmail.org/">qmail</a>

Line 327

Line 325

A source code patch exists which remedies this problem.</a>

009: SECURITY FIX: May 30, 2004

009: SECURITY FIX: May 30, 2004   All architectures

A flaw in the Kerberos V

<ahref="http://www.openbsd.org/cgi-bin/man.cgi?query=kdc">kdc(8)</a>

server could result in the administrator of a Kerberos realm having

Line 341

Line 339

A source code patch exists which remedies this problem.</a>

008: SECURITY FIX: May 26, 2004

008: SECURITY FIX: May 26, 2004   All architectures

With the introduction of IPv6 code in

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xdm&apropos=0&sektion=0&manpath=OpenBSD+Current&arch=i386&format=html">xdm(1)</a>,

one test on the 'requestPort' resource was deleted by accident. This

Line 354

Line 352

A source code patch exists which remedies this problem.</a>

007: SECURITY FIX: May 20, 2004

007: SECURITY FIX: May 20, 2004   All architectures

A heap overflow in the

server has been discovered that can be exploited by clients sending

Line 365

Line 363

A source code patch exists which remedies this problem.</a>

006: SECURITY FIX: May 13, 2004

006: SECURITY FIX: May 13, 2004   All architectures

Check for integer overflow in procfs. Use of procfs is not recommended.

A source code patch exists which remedies this problem.</a>

005: RELIABILITY FIX: May 6, 2004

005: RELIABILITY FIX: May 6, 2004   All architectures

Reply to in-window SYN with a rate-limited ACK.

A source code patch exists which remedies this problem.</a>

004: RELIABILITY FIX: May 5, 2004

004: RELIABILITY FIX: May 5, 2004   All architectures

Restore the ability to negotiate tags/wide/sync with some SCSI controllers ( i.e.

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=siop&apropos=0&sektion=4&manpath=OpenBSD+Current&arch=i386&format=html">siop(4)</a>,

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=trm&apropos=0&sektion=4&manpath=OpenBSD+Current&arch=i386&format=html">trm(4)</a>,

Line 390

Line 388

A source code patch exists which remedies this problem.</a>

003: RELIABILITY FIX: May 5, 2004

003: RELIABILITY FIX: May 5, 2004   All architectures

Under load "recent model"

controllers will lock up.

Line 399

Line 397

A source code patch exists which remedies this problem.</a>

002: SECURITY FIX: May 5, 2004

002: SECURITY FIX: May 5, 2004   All architectures

Pathname validation problems have been found in

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cvs&apropos=0&sektion=1&manpath=OpenBSD+Current&arch=i386&format=html">cvs(1)</a>,

allowing malicious clients to create files outside the repository, allowing