NetBSD Multiple Local Unspecified Binary Compatibility Layer Vulnerabilities
BID:11996
Info
NetBSD Multiple Local Unspecified Binary Compatibility Layer Vulnerabilities
| Bugtraq ID: | 11996 |
| Class: | Unknown |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Dec 16 2004 12:00AM |
| Updated: | Dec 16 2004 12:00AM |
| Credit: | Evgeny Demidov is credited with the discovery of these vulnerabilities. |
| Vulnerable: |
NetBSD NetBSD 1.6.2 NetBSD NetBSD 1.6.1 NetBSD NetBSD 1.6 NetBSD NetBSD 1.5.3 NetBSD NetBSD 1.5.2 NetBSD NetBSD 1.5.1 NetBSD NetBSD 1.5 |
| Not Vulnerable: |
NetBSD NetBSD 2.0 |
Discussion
NetBSD Multiple Local Unspecified Binary Compatibility Layer Vulnerabilities
It is reported that NetBSD is susceptible to multiple unspecified local vulnerabilities in its binary compatibility layer. It is reported that many, if not all of the compatibility types are affected by these vulnerabilities. The system call translation functions reportedly execute unsafe operations with the user-supplied system call arguments.
This BID will be updated as further information is disclosed, and as further analysis is performed.
These vulnerabilities affect computers running NetBSD that have any 'COMPAT_*' options defined in the running kernel.
These vulnerabilities allow local users to crash the kernel, denying service to legitimate users. It is also conjectured that some of these issues may allow for code execution in kernel-space, leading to privilege escalation.
It is reported that NetBSD is susceptible to multiple unspecified local vulnerabilities in its binary compatibility layer. It is reported that many, if not all of the compatibility types are affected by these vulnerabilities. The system call translation functions reportedly execute unsafe operations with the user-supplied system call arguments.
This BID will be updated as further information is disclosed, and as further analysis is performed.
These vulnerabilities affect computers running NetBSD that have any 'COMPAT_*' options defined in the running kernel.
These vulnerabilities allow local users to crash the kernel, denying service to legitimate users. It is also conjectured that some of these issues may allow for code execution in kernel-space, leading to privilege escalation.
Exploit / POC
NetBSD Multiple Local Unspecified Binary Compatibility Layer Vulnerabilities
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
NetBSD Multiple Local Unspecified Binary Compatibility Layer Vulnerabilities
Solution:
NetBSD has released fixes for these issues:
NetBSD-current is reported to be fixed as of 28 Oct. 2004.
NetBSD-2.0 branch is reported to be fixed as of 13 Nov. 2004, with the 2.0 release including the fix.
NetBSD-1.6 branch is reported to be fixed as of 17 Dec. 2004.
Please refer to the referenced NetBSD advisory for further information on obtaining fixes.
Solution:
NetBSD has released fixes for these issues:
NetBSD-current is reported to be fixed as of 28 Oct. 2004.
NetBSD-2.0 branch is reported to be fixed as of 13 Nov. 2004, with the 2.0 release including the fix.
NetBSD-1.6 branch is reported to be fixed as of 17 Dec. 2004.
Please refer to the referenced NetBSD advisory for further information on obtaining fixes.
References
NetBSD Multiple Local Unspecified Binary Compatibility Layer Vulnerabilities
References:
References:
- NetBSD Homepage (NetBSD)
- NetBSD kernel local Denial of Service vulnerabilities (Evgeny Demidov)
- NetBSD Security Page (NetBSD)
- NetBSD kernel local vulnerabilities (Evgeny Demidov