DaemonForums  

Go Back   DaemonForums > DaemonForums.org > News

News News regarding BSD and related.

Reply
 
Thread Tools Display Modes
  #1   (View Single Post)  
Old 7th April 2011
J65nko J65nko is offline
Administrator
 
Join Date: May 2008
Location: Budel - the Netherlands
Posts: 4,131
Default NetBSD and FreeBSD patch hole in IPComp implementation

From http://www.h-online.com/security/new...n-1222399.html

Quote:
A hole in the IPComp protocol implementation of certain operating systems can be exploited to compromise a server. IPComp is used for compressing individual IP datagrams mainly in conjunction with IPSec and other VPN technologies. According to Tavis Ormandy, certain embedded datagrams can cause a recursion after they have been unpacked, which results in a kernel stack overflow.
__________________
You don't need to be a genius to debug a pf.conf firewall ruleset, you just need the guts to run tcpdump
Reply With Quote
  #2   (View Single Post)  
Old 7th April 2011
BSDfan666 BSDfan666 is offline
Real Name: N/A, this is the interweb.
Banned
 
Join Date: Apr 2008
Location: Ontario, Canada
Posts: 2,223
Default

This was also fixed in OpenBSD.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
The Design and Implementation of the FreeBSD Operating System cajunman4life Book reviews 9 27th July 2013 04:04 PM
Adobe: hole closed, hole open J65nko News 0 5th November 2010 06:50 PM
Design & Implementation 4.4 BSD vs FreeBSD m3t4tr0n Book reviews 8 6th August 2010 11:02 PM
FreeBSD 7.2 X Server 1.6 Patch dialeight FreeBSD Installation and Upgrading 1 4th August 2009 04:25 PM
Patch and compile bind94 on FreeBSD ports collection dylan912 FreeBSD Ports and Packages 2 4th July 2008 12:23 PM


All times are GMT. The time now is 10:34 AM.


Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.
Content copyright © 2007-2010, the authors
Daemon image copyright ©1988, Marshall Kirk McKusick