NetBSD Announces Four New Security Advisories

Posted by CowboyNeal on Thursday February 19, 2004 @06:47PM from the staying-wary dept.

Dan writes "The NetBSD project has announced four new security advisories. NetBSD ships with the racoon(8) IKE (Internet Key Exchange) daemon, a vulnerability was found in the code for packet validation of "informational exchange" messages. Inconsistent IPv6 path MTU discovery handling vulnerability states that a malicious party can cause a remote kernel panic by using ICMPv6 "too big" messages. The OpenSSL 0.9.6 ASN.1 parser vulnerability could lead to a possible denial-of-service. Finally, shmat reference counting bug - programming error in the shmat(2) system call can result in a shared memory segment's reference count being erroneously incremented."

1 of 62 comments (clear)

Min score:

Reason:

Sort:

Re:Darn, FreeBSD also affected. by kahsim · 2004-02-21 16:30 · Score: 1, Offtopic

What is the difference between FreeBSD and OpenBSD? It says I acn get OpenBSD for free from their website, but where do I go? How do I post a question, which is original? Sorry, I am new to this site.