www/security.html - diff

Return to security.html CVS log

Up to [local] / www

version 1.125, 2000/05/25 07:39:27

version 1.126, 2000/05/25 16:44:37

Line 204

<p>

<ul>

<li><a href=errata.html#procfs>May 25, 2000:

<li><a href=errata26.html#xlockmore>May 25, 2000:

xlockmore has a bug which a localhost attacker can use to gain

access to the encrypted root password hash (which is normally

encoded using blowfish (see

crypt(3)</a>)

(patch included).</a>

<li><a href=errata.html#procfs>Jan 20, 2000:

<li><a href=errata26.html#procfs>Jan 20, 2000:

Systems running with procfs enabled and mounted are

vulnerable to a very tricky exploit. procfs is not

mounted by default.

(patch included).</a>

<li><a href=errata.html#ifmedia>Nov 9, 1999:

<li><a href=errata26.html#ifmedia>Nov 9, 1999:

Any user could change interface media configurations, resulting in

a localhost denial of service attack.

(patch included).</a>

<li><a href=errata.html#sslUSA>Dec 2, 1999:

<li><a href=errata26.html#sslUSA>Dec 2, 1999:

A buffer overflow in the RSAREF code included in the

USA version of libssl, is possibly exploitable in

httpd, ssh, or isakmpd, if SSL/RSA features are enabled.

(patch included).<br></a>

<strong>Update:</strong> Turns out that this was not exploitable

in any of the software included in OpenBSD 2.6.

<li><a href=errata.html#sendmail>Dec 4, 1999:

<li><a href=errata26.html#sendmail>Dec 4, 1999:

Sendmail permitted any user to cause a aliases file wrap,

thus exposing the system to a race where the aliases file

did not exist.