Description
Integer overflow in the systrace_preprepl function (STRIOCREPLACE) in systrace in OpenBSD 3.9 and NetBSD 3 allows local users to cause a denial of service (crash), gain privileges, or read arbitrary kernel memory via large numeric arguments to the systrace ioctl.
References
- openbsd-systracepreprepl-integer-overflow(29392) vdb-entry
- 29570 vdb-entry
- 22324 third-party-advisory
- http://scary.beasts.org/security/CESA-2006-003.html
- 20392 vdb-entry
- 1017009 vdb-entry
- [3.9] 20061007 014: SECURITY FIX: October 7, 2006 vendor-advisory