Slashdot Mirror
OpenBSD Vulnerabilty
*no comment* writes "Normally vulnerability reports on slashdot wouldn't make it because there are so many. This one however is for the normally very secure OpenBSD. Someone can crash an OpenBSD bridge using a newly discovered ICMP exploit. More can be read here. This shouldn't affect most people as this only affects people that use OBSD as a bridge."
The quote is "Only one remote hole in the default install, in more than 8 years!"
This exploit is only possible when you have bridging configured, which is not part of a default install, nor most common installations.
This is a crash not an exploit, the OpenBSD team uses a very precise definition for that claim. They also seem to handle a crash that does not lead to an exploit in a more crass and off hand manner, but thats another story.
"I use a Mac because I'm just better than you are."
It's only a big deal with Microsoft because the vulnerabilities in Microsoft software are typically quite severe and affect almost everyone.
Because the worst you can do with it is crash the system, not gain access.
Isn't not even an exploit, I mean, come'on people, get a clue here. There's a huge difference between a DoS and an Exploit. This does nothing, even if someone, somehow knew there was a bridge.
You have to have a bridge setup *AND* enable the special IPsec processing support on the bridge which means *very few* people would be affected by this issue.
You need to have more than just bridging configured - you need the link2 flag set on the bridge, which is only useful if you are bridging two networks via a VPN.