Category Archives: FreeBSD Security Advisories

A security bug in the latest version of FreeBSD can be exploited to grant unprivileged users complete control over the operating system, a German researcher discovered. The flaw is present in FreeBSD 8.0 and is known to affect versions 7.1 … Continue reading →

The FreeBSD Security Team has issued the following security warnings: FreeBSD-SA-09:14.devfs – Devfs / VFS NULL pointer race condition FreeBSD-SA-09:13.pipe – kqueue pipe race conditions FreeBSD-EN-09:05.null – No zero mapping feature For background info, problem description, impact, workaround and solutions, … Continue reading →

The FreeBSD Security Team has issued the following security warning: FreeBSD-SA-09:12.bind – BIND named(8) dynamic update message remote DoS For background info, problem description, impact, workaround and solution, have a look at the advisory page: bind

The FreeBSD Security Team has issued the following security warnings: FreeBSD-SA-09:11.ntpd - ntpd stack-based buffer-overflow vulnerability FreeBSD-SA-09:10.ipv6 – Missing permission check on SIOCSIFINFO_IN6 ioctl FreeBSD-SA-09:09.pipe – Local information disclosure via direct pipe writes For background info, problem description, impact, workaround and solutions, … Continue reading →

The FreeBSD Security Team has issued the following security warnings: FreeBSD-SA-09:08.openssl  - Remotely exploitable crash in OpenSSL FreeBSD-SA-09:07.libc - Information leak in db(3) For background info, problem description, impact, workaround and solution, have a look at the individual advisory pages: openssl | libc

The FreeBSD Security Team has issued the following security warning: FreeBSD-SA-09:06.ktimer – Local privilege escalation I. Background In FreeBSD 7.0, support was introduced for per-process timers as defined in the POSIX realtime extensions. This allows a process to have a … Continue reading →

The FreeBSD Security Team has issued the following security warning: FreeBSD-SA-09:05.telnetd – telnetd code execution vulnerability I Background The FreeBSD telnet daemon, telnetd(8), implements the server side of the TELNET virtual terminal protocol. It has been disabled by default in FreeBSD since … Continue reading →