Slashdot Mirror

← Back to Stories (view on slashdot.org)

Remote Exploit Discovered for OpenBSD

Posted by samzenpus on from the patch-it-up dept.

An anonymous reader writes "OpenBSD is known for its security policies, and for its boast of "only one remote exploit in over 10 years". Well, make that two, because Core Security has found a remotely exploitable buffer overflow in the OpenBSD kernel. Upgrade your firewalls as soon as possible."

19 of 338 comments (clear)

  1. WHOA WTF by inode_buddha · · Score: 2, Funny

    freakin rare event, hell must have frozen over! /me takes a snapshot of the moment and feels badly for all the BSD-folk

    --
    C|N>K
    1. Re:WHOA WTF by Anonymous Coward · · Score: 1, Funny

      /me takes a snapshot of the moment and feels badly for all the BSD-folk

      Yeah, us BSD folks are horrified when a bug is found. You Linux pups seem to think bugs are normal events.

      (Yeah, I'm trolling, which is why this is anonymous.)

    2. Re:WHOA WTF by Misch · · Score: 3, Funny

      It was 81 degrees F in New Jersey yesterday, so hell didn't freeze over.

      --

      --You will rephrase your request for me to go to hell. Goto statements are not acceptable programming constructs
  2. Heh by cyberbob2351 · · Score: 5, Funny
    From TFA:

    Remotely Exploitable: Yes
    Locally Exploitable: No
    That right there is the biggest slap in the face! Everyone should have the freedom to fux0r their own machine!

    Opensource my ass...
    --
    for sale
    I'm a self-modifying sig virus
    1. Re:Heh by bean123456789 · · Score: 2, Funny

      Opensource my ass...

      I believe I speak for everybody when I say no.

  3. It's a feature by andy314159pi · · Score: 4, Funny

    Vulnerability Description
    The OpenBSD kernel contains a memory corruption vulnerability in the code that handles IPv6 packets. Exploitation of this vulnerability can result in:
    1) Remote execution of arbitrary code at the kernel level on the vulnerable systems (complete system compromise), or;
    2) Remote denial of service attacks against vulnerable systems (system crash due to a kernel panic)

    I think they just found the Windows2003 Server Emulator.
  4. That's a relief by Anonymous Coward · · Score: 0, Funny


    haha
    luckily i'am running Windows so no remote exploits for me, take that OpenBSD !!!1@#x"3eleventy !

  5. Obligatory by Anonymous Coward · · Score: 1, Funny

    It was as if several dozen antiquated nameservers suddenly cried out in pain"

  6. OpenBSD - now TWICE as insecure by Anonymous Coward · · Score: 3, Funny

    Wow, OpenBSD's security rating just went from "999,999" on a scale of 1 to a million to "999,998" on a scale of 1 to a million.

  7. Re:Well done, the OpenBSD team. by Leto-II · · Score: 5, Funny

    Could this be a sign of overconfidence in the Linux community?


    Not really, since this has nothing to do with Linux. It's OpenBSD, not Linux.
    --
    Do not anger the worm.
  8. Holy Cow, an OpenBSD Vuln? by Anonymous Coward · · Score: 5, Funny

    Thank GOD I run the company webserver on NT!

  9. Amiga : ZERO exploits !! by Anonymous Coward · · Score: 2, Funny

    Amiga : ZERO exploits !! About as many users !!

  10. Re:Moo by noz · · Score: 4, Funny

    See! I told you ipv6 was evil!
    You mean ipv666 don't you?
  11. Re:Moo by BrainInAJar · · Score: 3, Funny

    An IP for everyone. Bah!

    why, That's Communism!

  12. Time to make a list... by Anonymous Coward · · Score: 5, Funny

    -The Sox won the world series
    -The Pope died
    -Mac got Intel chips
    -The Berlin Wall came down
    -I out-lived 4 cats
    -Man walked on the moon
    -I got laid
    and...
    -BSD had a hole

    1. Re:Time to make a list... by bytesex · · Score: 5, Funny

      Do the facts that you got laid and that BSD had a hole have anything to do with each other ? Just asking - kids these days...

      --
      Religion is what happens when nature strikes and groupthink goes wrong.
  13. Re:Well done, the OpenBSD team. by VGPowerlord · · Score: 2, Funny

    The team and Microsoft should take a leaf out of your book.

    What team, the A Team? Should take out Microsoft?

    I love it when a plan comes together.
    --
    GLaDOS for President 2016! "Well here we are again. It's always such a pleasure." -- GLaDOS, 2011
  14. Re:Well done, the OpenBSD team. by TheDarkener · · Score: 2, Funny

    ...Microsoft should take a leaf out of your book.
     
    Uhh, they did. TCP/IP stack.
     
    Of course, you can't ever say a leaf made the tree...

    --
    It is pitch black. You are likely to be eaten by a grue.
  15. Re:Well done, the OpenBSD team. by Tom · · Score: 5, Funny

    It is when basically the only thing your OS does "in the default install" is allow SSH logins. Which is more remote access than a default install of Windos contains. ;-)

    Ok, make that "more intentional remote access"...
    --
    Assorted stuff I do sometimes: Lemuria.org