Skip to main content

Critical Vulnerability Discovered In OpenBSD

posted onMarch 15, 2007
by hitbsecnews

For just the second time in a decade, a remotely exploitable security hole has been discovered in OpenBSD.

The vulnerability exists in the kernel of OpenBSD, a free, Unix-like operating system designed with an emphasis on security, and stems from how the OS handles IPv6 traffic, according to Ivan Arce, CTO at Core Security, the Boston-based penetration testing vendor that discovered the flaw.

OpenBSD versions 3.1, 3.6, 3.8, 3.9, 4.0, and 4.1 (released Feb. 26th, 2006) are vulnerable, and OpenBSD.org has released a patch for the vulnerability.

Hackers could exploit the flaw to trigger a buffer overflow in kernel memory, which would pave the way for remote code execution and allow for a complete compromise of the affected machine, Arce said.

But in order to exploit the flaw, an attacker would need to be on the same network as the target system, or be able to send fragmented IPv6 packets to the network, he added.

Source

Tags

Security

You May Also Like

Recent News

Friday, November 29th

Tuesday, November 19th

Friday, November 8th

Friday, November 1st

Tuesday, July 9th

Wednesday, July 3rd

Friday, June 28th

Thursday, June 27th

Thursday, June 13th

Wednesday, June 12th

Tuesday, June 11th

Simplenews subscription

Stay informed - subscribe to our newsletter.
The subscriber's email address.
Keeping Knowledge Free for Over a Decade

Copyright © 2018 Hack In The Box. All rights reserved.

36th Floor, Menara Maxis, Kuala Lumpur City Centre 50088 Kuala Lumpur Malaysia
Tel: +603-2615-7299 Fax: +603-2615-0088