....
 

Guardian Digital Inc. > InfoCenter > Mailing List Archives > Full Disclosure

Full Disclosure Mailing List Archive

From: Evgeny Demidov (demidov@gleg.net)
Date: Fri Dec 17 2004 - 15:45:33 EST


Name: NetBSD kernel local vulnerabilities
Date: Dec 18, 2004
Author: Evgeny Demidov

Description:

There exists multiple vulnerabilities in NetBSD binary compatibility code.
They can be approximately divided into two parts:

1) signal number validation problems in xxx_sys_kill(),xxx_sys_sigaction() and similar syscalls

These are limited to local DoS only.
By passing large signal numbers to certain syscalls in compat code local attacker can crash the kernel.

2) buffer overflows

At least one of them can be exploited to gain full super-user privilegies.

Fix:

NetBSD has issued advisory - ftp://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2004-010.txt.asc

History:

Oct 12, 2004 - initial vendor notification
Oct 20, 2004 - NetBSD team performed extensive audit of compat code!
Dec 18, 2004 - public release of this advisory

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html



[ About Guardian Digital ] - [ Press Center ] - [ Contact Us ] - [ System Activation ] - [ Reseller Info ] - [ Online Store ] - [ Site Map ]
Copyright (c) 2000 - 2004 Guardian Digital, Inc. Linux Lockbox and EnGarde are Trademarks of Guardian Digital, Inc.