OpenBSD Connected Socket Ownership Vulnerability

Bugtraq ID:	3406
Class:	Access Validation Error
CVE:
Remote:	No
Local:	Yes
Published:	Oct 06 2001 12:00AM
Updated:	Oct 06 2001 12:00AM
Credit:	This vulnerability was disclosed on bugtraq by Gustavo Ajzenman <[email protected]> on October 5th, 2001.
Vulnerable:	OpenBSD OpenBSD 2.9 OpenBSD OpenBSD 2.8 OpenBSD OpenBSD 2.7 OpenBSD OpenBSD 2.6 OpenBSD OpenBSD 2.5 OpenBSD OpenBSD 2.4 OpenBSD OpenBSD 2.3 OpenBSD OpenBSD 2.2 OpenBSD OpenBSD 2.1 OpenBSD OpenBSD 2.0
Not Vulnerable:

OpenBSD Connected Socket Ownership Vulnerability

OpenBSD contains a bug that allows users capable of executing local processes to send signals to processes running on the system belonging to other users. This could result in unpredictable behavior or denial of service against the recipient processes. The default action when SIGIO and SIGURG signals are recieved in OpenBSD is "ignore", but this issue could still affect processes designed to catch these signals.

It should be noted that this vulnerability may affect other BSD-based operating systems.

OpenBSD Connected Socket Ownership Vulnerability

Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

OpenBSD Connected Socket Ownership Vulnerability

Solution:
The following unofficial patch was provided by Gustavo Ajzenman <[email protected]>:


OpenBSD OpenBSD 2.9

• Gustavo Ajzenman uipc_socket2.patch
  http://www.securityfocus.com/web/data/vulnerabilities/patches/uipc_soc ket2.patch

OpenBSD Connected Socket Ownership Vulnerability

References:

• Bugtraq ID 402: AIX SIGIO and SIGURG Signals Vulnerability (SecurityFocus)