PT-2006-5113 · Openbsd+2 · Openbsd+2

Martin Husemann + 1 · Publicado 2006-08-24 · Atualizado 2017-07-20 · CVE-2006-4304

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions FreeBSD versions 4.11 through 6.1 NetBSD versions 2.0 through 4.0 beta before 20060823 OpenBSD versions 3.8 and 3.9 before 20060902

Description A buffer overflow issue exists in the sppp driver, allowing remote attackers to cause a denial of service, obtain sensitive information, and possibly execute arbitrary code via crafted Link Control Protocol packets. The overflow occurs when an option length exceeds the overall length in packets, affecting pppoe and ippp.

Recommendations For FreeBSD versions 4.11 through 6.1, update to a version outside of this range to resolve the issue. For NetBSD versions 2.0 through 4.0 beta before 20060823, update to a version after 20060823 to resolve the issue. For OpenBSD versions 3.8 and 3.9 before 20060902, update to a version after 20060902 to resolve the issue.

Correção

Identificadores relacionados

CVE-2006-4304

Produtos afetados

Freebsd

Netbsd

Openbsd

Referências · 11

• http://secunia.com/advisories/21587 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28562 · Nota
• http://securitytracker.com/id?1016745 · Nota
• ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2006-019.txt.asc · Aviso do Fabricante
• http://securityfocus.com/bid/19684 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-4304 · Nota de Segurança
• http://openbsd.org/errata.html#sppp · Correção, Aviso do Fabricante
• http://secunia.com/advisories/21731 · Aviso do Fabricante
• http://openbsd.org/errata38.html#sppp · Correção, Aviso do Fabricante
• http://security.freebsd.org/patches/SA-06:18/ppp4x.patch · Nota
• http://security.freebsd.org/advisories/FreeBSD-SA-06:18.ppp.asc · Aviso do Fabricante