OpenBSD 3.4 Crypto Card Handlers File Descriptor Leak Vulnerability

Bugtraq ID:	9436
Class:	Unknown
CVE:
Remote:	No
Local:	Yes
Published:	Jan 16 2004 12:00AM
Updated:	Jan 16 2004 12:00AM
Credit:	This vulnerability was announced by the vendor.
Vulnerable:	OpenBSD OpenBSD 3.4
Not Vulnerable:

OpenBSD 3.4 Crypto Card Handlers File Descriptor Leak Vulnerability

OpenBSD 3.4 has been reported prone to an undisclosed file descriptor leak vulnerability. The vendor has reported that this vulnerability may present problems when a crypto card is installed in the affected system.

OpenBSD 3.4 Crypto Card Handlers File Descriptor Leak Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

OpenBSD 3.4 Crypto Card Handlers File Descriptor Leak Vulnerability

Solution:
The vendor has released a patch to address this issue:


OpenBSD OpenBSD 3.4

• OpenBSD 009_isakmpd.patch
  ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.4/common/009_isakmpd.patch

OpenBSD 3.4 Crypto Card Handlers File Descriptor Leak Vulnerability

References:

• 009: SECURITY FIX: January 13, 2004 (OpenBSD)
  
• OpenBSD Homepage (OpenBSD)