Bulletins de sécurité triés par date

NetBSD-SA2011-005 ISC dhclient n'enlève pas les meta-caractères du shell
NetBSD-SA2011-004 risque de dépassement de pile via un paquet IPCOMP
NetBSD-SA2011-003 un accroissement de la mémoire du noyau controlé depuis l'espace utilisateur
NetBSD-SA2011-002 une situation de compétition au niveau de l'extention TLS OpenSSL
NetBSD-SA2011-001 possible déni de service sur BIND dû à une mauvaise gestion des enregistrements RRSIG
NetBSD-SA2010-013 possible déni de service pouvant entraîner le crash d'une machine via des datagrammes UDP6
NetBSD-SA2010-012 une situation de compétition au niveau de l'extention TLS d'OpenSSL.
NetBSD-SA2010-011 possibilité d'exécution de code arbitraire lors de la double libération de mémoire dans OpenSSL
NetBSD-SA2010-010 erreurs de gestion de la longueur des buffers dans netsmb
NetBSD-SA2010-009 erreurs de gestion des privilèges dans larn
NetBSD-SA2010-008 problème de limitation de ressource lié à sftp(1)/ftp(1)/glob(3)
NetBSD-SA2010-007 dépassement d'entier dans le code de décompression lié à libbz2
NetBSD-SA2010-006 vérification incorrecte de la longueur d'un buffer dans CODA
NetBSD-SA2010-005 une vulnérabilité de type dénis de service sur le serveur NTP
NetBSD-SA2010-004 le bit NX (No-eXecute) de l'architecture amd64 est désactivé par page
NetBSD-SA2010-003 le noyau peut être crashé à partir des pilotes azalia(4)/hdaudio(4)
NetBSD-SA2010-002 une vulnérabilité de type man in the middle concernant la renégociation TLS d'OpenSSL
NetBSD-SA2010-001 une possible attaque de dénis de service au niveau du chargement automatique de module gérant les systèmes de fichiers
NetBSD-SA2009-013 une vulnérabilité de type dénis de service sur la mise à jour dynamique de BIND
NetBSD-SA2009-012 possible dépassement de tampon sur l'implémentation de SHA2
NetBSD-SA2009-011 une vulnérabilité de type dénis de service sur le serveur DHCP de l'ISC
NetBSD-SA2009-010 une vulnérabilité de type dépassement de pile au niveau du drapeau subnet-mask de l'utilitaire dhclient de l'ISC
NetBSD-SA2009-009 une vulnérabilité sur la vérification des signatures DSA et épuisement de mémoire DTLS d'OpenSSL
NetBSD-SA2009-008 une vulnérabilité sur la vérification des signatures CMS et dénis de service lors du parsing ASN1 d'OpenSSL
NetBSD-SA2009-007 possible dépassement de tampon dans hack(6)
NetBSD-SA2009-006 possible dépassement de tampon dans ntp
NetBSD-SA2009-005 une attaque contre SSH permettant de récupérer du texte en clair
NetBSD-SA2009-004 une vulnérabilité au niveau d'un changement de mot de passe via passwd(1) et OpenPAM NetBSD
NetBSD-SA2009-003 proplib crashe lors de la lecture de mauvaises données XML
NetBSD-SA2009-002 une vulnérabilité multiple de type denis de service sur tcpdump et des problèmes d'exécution de code arbitraire
NetBSD-SA2009-001 problèmes de denis de service dans le pare-feu PF
NetBSD-SA2008-015 messages "Packet Too Big" concernant ICMPv6
NetBSD-SA2008-014 vulnérabilité par requête cross-site forgée dans ftpd(8)
NetBSD-SA2008-013 vulnérabilité dans le protocole Neighbor Discovery pour IPv6
NetBSD-SA2008-012 problèmes de denis de service dans racoon(8)
NetBSD-SA2008-011 problèmes de dénis de service via ICMPv6 MLD
NetBSD-SA2008-010 problèmes de dénis de service sur des paquets malicieux PPPoE Discovery pouvant entraîner des crashes du noyau
NetBSD-SA2008-009 problème d'empoisonnement du cache dans BIND
NetBSD-SA2008-008 problème sur la réduction de Montgomery dans OpenSSL
NetBSD-SA2008-007 problème multiples dans OpenSSL
NetBSD-SA2008-006 dépassement d'entier dans la fonction strfmon(3)
NetBSD-SA2008-005 multiples problèmes sur OpenSSH
NetBSD-SA2008-004 multiples problèmes dans bzip2(1)
NetBSD-SA2008-003 dénis de service dans le protocole IPsec pour IPv6
NetBSD-SA2008-002 problème d'endianness dans fast_ipsec(4)
NetBSD-SA2008-001 dépassement d'entier dans file(1)
NetBSD-SA2007-007 BIND cryptographically weak query IDs
NetBSD-SA2007-006 Local panics in display driver code
NetBSD-SA2007-005 IPv6 Type 0 Routing Header
NetBSD-SA2007-004 Insufficient length checking in iso(4)
NetBSD-SA2007-003 BIND multiple denial of service vulnerabilities
NetBSD-SA2007-002 Integer overflows in Render and DBE extensions
NetBSD-SA2007-001 Integer overflow in ktruser()
NetBSD-SA2006-027 libc glob(3) buffer overflow
NetBSD-SA2006-026 Multiple denial of service issues
NetBSD-SA2006-025 Multiple information/memory leakage issues
NetBSD-SA2006-024 systrace(4) integer overflow
NetBSD-SA2006-023 OpenSSL RSA Signature Forgery
NetBSD-SA2006-022 BIND recursive query and SIG query processing
NetBSD-SA2006-021 Integer overflows in CID-keyed font parser
NetBSD-SA2006-020 Integer overflows in PCF font parsers
NetBSD-SA2006-019 Malicious PPP options can overrun a kernel buffer
NetBSD-SA2006-018 sail(6), dm(8) and tetris(6) buffer overflows
NetBSD-SA2006-017 Sendmail malformed multipart MIME messages
NetBSD-SA2006-016 IPv6 socket options can crash the system
NetBSD-SA2006-015 FPU Information leak on i386/amd64/Xen platforms with AMD CPUs
NetBSD-SA2006-014 An audio subsystem race condition may crash the system
NetBSD-SA2006-013 sysctl(3) local denial of service
NetBSD-SA2006-012 SIOCGIFALIAS ioctl may cause system crash
NetBSD-SA2006-011 IPSec replay attack
NetBSD-SA2006-010 Sendmail race condition
NetBSD-SA2006-009 False detection of Intel hardware RNG
NetBSD-SA2006-008 Malformed ELF interpreter causes system crash
NetBSD-SA2006-007 mail(1) creates record file with insecure umask
NetBSD-SA2006-005 bridge memory disclosure
NetBSD-SA2006-004 Denial of services issues with pf
NetBSD-SA2006-003 Multiple denial of services issues with racoon
NetBSD-SA2006-002 settimeofday() time wrap
NetBSD-SA2006-001 Kernfs kernel memory disclosure
NetBSD-SA2005-013 ptrace() permissions after S[UG]ID and exec()
NetBSD-SA2005-012 SO_LINGER argument checking DIAGNOSTIC panic
NetBSD-SA2005-011 ntpd may start with different group id than desired
NetBSD-SA2005-010 OpenSSL "man in the middle" can force weak protocol
NetBSD-SA2005-009 Insecure /tmp file usage when building using imake
NetBSD-SA2005-008 Heap memory corruption in FreeBSD compat code
NetBSD-SA2005-007 AES-XCBC-MAC (IPsec AH) calculated using fixed key
NetBSD-SA2005-006 Multiple vulnerabilities in CVS
NetBSD-SA2005-005 cgd(4) key destruction on unconfigure
NetBSD-SA2005-004 Buffer overflows in MIT Kerberos 5
NetBSD-SA2005-003 F_CLOSEM local denial of service
NetBSD-SA2005-002 Local DoS via audio device with specific drivers
NetBSD-SA2005-001 Crypto leaks across HyperThreaded CPUs (i386, P4, HTT+SMP only)
NetBSD-SA2004-010 Insufficient argument validation in compat code
NetBSD-SA2004-009 ftpd root escalation
NetBSD-SA2004-008 CVS server vulnerability
NetBSD-SA2004-007 Systrace systrace_exit() local root
NetBSD-SA2004-006 TCP protocol and implementation vulnerability
NetBSD-SA2004-005 Denial of service vulnerabilities in OpenSSL
NetBSD-SA2004-004 shmat reference counting bug
NetBSD-SA2004-003 OpenSSL 0.9.6 ASN.1 parser vulnerability
NetBSD-SA2004-002 Inconsistent IPv6 path MTU discovery handling
NetBSD-SA2004-001 Insufficient packet validation in racoon IKE daemon
NetBSD-SA2003-018 DNS negative cache poisoning
NetBSD-SA2003-017 OpenSSL multiple vulnerability
NetBSD-SA2003-016 Sendmail - another prescan() bug CAN-2003-0694
NetBSD-SA2003-015 Remote and local vulnerabilities in XFree86 font libraries
NetBSD-SA2003-014 Insufficient argument checking in sysctl(2)
NetBSD-SA2003-013 Kernel memory disclosure via ibcs2
NetBSD-SA2003-012 Out of bounds memset(0) in sshd
NetBSD-SA2003-011 off-by-one error in realpath(3)
NetBSD-SA2003-010 remote panic in OSI networking code
NetBSD-SA2003-009 sendmail buffer overrun in prescan() address parser
NetBSD-SA2003-008 faulty length checks in xdrmem_getbytes
NetBSD-SA2003-007 (Another) Encryption weakness in OpenSSL code
NetBSD-SA2003-006 Cryptographic weaknesses in Kerberos v4 protocol
NetBSD-SA2003-005 RSA timing attack in OpenSSL code
NetBSD-SA2003-004 Format string vulnerability in zlib gzprintf()
NetBSD-SA2003-003 Buffer Overflow in file(1)
NetBSD-SA2003-002 Malformed header Sendmail Vulnerability
NetBSD-SA2003-001 Encryption weakness in OpenSSL code
NetBSD-SA2002-029 named(8) multiple denial of service and remote execution of code
NetBSD-SA2002-028 Buffer overrun in getnetbyname/getnetbyaddr
NetBSD-SA2002-027 ftpd STAT output non-conformance can deceive firewall devices
NetBSD-SA2002-026 buffer overrun in kadmind
NetBSD-SA2002-025 trek(6) buffer overrun
NetBSD-SA2002-024 IPFilter FTP proxy
NetBSD-SA2002-023 sendmail smrsh vulnerability
NetBSD-SA2002-022 buffer overrun in pic(1)
NetBSD-SA2002-021 rogue vulnerability
NetBSD-SA2002-019 Buffer overrun in talkd
NetBSD-SA2002-018 Multiple security isses with kfd daemon
NetBSD-SA2002-017 shutdown(s, SHUT_RD) on TCP socket does not work as intended
NetBSD-SA2002-016 Insufficient length check in ESP authentication data
NetBSD-SA2002-015 (another) buffer overrun in libc/libresolv DNS resolver
NetBSD-SA2002-014 fd_set overrun in mbone tools and pppd
NetBSD-SA2002-013 Bug in NFS server code allows remote denial of service
NetBSD-SA2002-012 buffer overrun in setlocale
NetBSD-SA2002-011 Sun RPC XDR decoder contains buffer overflow
NetBSD-SA2002-010 symlink race in pppd
NetBSD-SA2002-009 Multiple vulnerabilities in OpenSSL code
NetBSD-SA2002-007 Repeated TIOCSCTTY ioctl can corrupt session hold counts
NetBSD-SA2002-006 buffer overrun in libc DNS resolver
NetBSD-SA2002-005 OpenSSH protocol version 2 challenge-response authentication
NetBSD-SA2002-004 Off-by-one error in openssh session
NetBSD-SA2002-003 IPv4 forwarding doesn't consult inbound SPD
NetBSD-SA2002-002 gzip buffer overrun with long filename
NetBSD-SA2002-001 Close-on-exec, SUID and ptrace(2)
NetBSD-SA2001-018 Remote Buffer Overflow Vulnerability in BSD Line Printer Daemon
NetBSD-SA2001-017 sendmail(8) incorrect command line argument check.
NetBSD-SA2001-016 unsafe chdir usage in fts(3).
NetBSD-SA2001-015 Insufficient checking of lengths passed from userland to kernel.
NetBSD-SA2001-014 dump(8) exposes 'tty' group.
NetBSD-SA2001-013 OpenSSL PRNG weakness.
NetBSD-SA2001-012 telnetd(8) options overflow.
NetBSD-SA2001-011 Insufficient msg_controllen checking for sendmsg(2).
NetBSD-SA2001-010 sshd(8) "cookies" file mishandling on X11 forwarding.
NetBSD-SA2001-009 Race condition between sugid-exec and ptrace(2).
NetBSD-SA2001-008 Processes can gain "Supervisor" privileges on sh3.
NetBSD-SA2001-007 IP Filter may incorrectly pass packets.
NetBSD-SA2001-006 Denial of service using bogus fragmented IPv4 packets.
NetBSD-SA2001-005 Remote buffer overflow in ftpd.
NetBSD-SA2001-004 Buffer overflow in NTP daemon.
NetBSD-SA2001-003 Secure Shell (SSH) vulnerability and rnd(4) configuration.
NetBSD-SA2001-002 USER_LDT vulnerability on i386 systems only.
NetBSD-SA2001-001 Security vulnerabilies in BIND.
NetBSD-SA2000-018 Security vulnerability in ftpd.
NetBSD-SA2000-017 Security vulnerability in telnetd/libkrb.
NetBSD-SA2000-015 Security vulnerability in libutil.
NetBSD-SA2000-014 Security vulnerability in CGI interface of global packages.
NetBSD-SA2000-013 Security vulnerability in cfengine packages.
NetBSD-SA2000-012 Security vulnerability in NIS hostname lookup.
NetBSD-SA2000-011 Security vulnerability in netscape packages.
NetBSD-SA2000-010 Security vulnerability in wu-ftpd package.
NetBSD-SA2000-009 Security vulnerability in ftpd .
NetBSD-SA2000-008 Remote dhclient vulnerability.
NetBSD-SA2000-007 Bad key generation in libdes in NetBSD-current.
NetBSD-SA2000-006 ftpd error parsing /etc/ftpchroot.
NetBSD-SA2000-005 local cpu-hog denial of service.
NetBSD-SA2000-004 semcontrol(2) vulnerability.
NetBSD-SA2000-003 xlockmore package vulnerability.
NetBSD-SA2000-002 IP Options vulnerability.
NetBSD-SA2000-001 procfs vulnerability.
NetBSD-SA1999-012 VAX ptrace(2) vulnerability.
NetBSD-SA1999-011 profil(2) problems.
NetBSD-SA1999-010 ARP problems.
NetBSD-SA1999-009 i386 SVR4 compatibility problems.
NetBSD-SA1999-008 vfs locking problems.
NetBSD-SA1999-007 mount(2) problems.
NetBSD-SA1999-006 umapfs problems.
NetBSD-SA1999-005 lsof(1) package problems.
NetBSD-SA1999-004 traceroute(1) problems.
NetBSD-SA1999-003 wu-ftpd(8) package problems.
NetBSD-SA1999-002 netstat(1) problems.
NetBSD-SA1999-001 select(2)/accept(2) race condition in TCP servers.
NetBSD-SA1998-005 mmap(2) device driver vulnerabilties.
NetBSD-SA1998-004 at(1) vulnerabilties.
NetBSD-SA1998-003 mmap(2) and append-only files vulnerabilities.
NetBSD-SA1998-002 xterm and Xaw vulnerablilities.
NetBSD-SA1998-001 BIND 4.9.6 vulnerabilities.