BSD UNIX PPP LCP Options Length Buffer Overflow Lets Remote Users Deny Service
|
|
SecurityTracker Alert ID: 1016745
|
|
SecurityTracker URL: http://securitytracker.com/id?1016745
|
|
CVE Reference: CVE-2006-4304
(Links to External Site)
|
Updated: Sep 3 2006
|
Original Entry Date: Aug 24 2006
|
Impact: Denial of service via network
|
Fix Available: Yes
Vendor Confirmed: Yes
|
Description: A vulnerability was reported in PPP on BSD-based systems. A remote user can cause denial of service conditions.
The Point-to-Point Protocol (PPP) implementation on FreeBSD, OpenBSD, and NetBSD does not properly validate Line Control Protocol
(LCP) options. A remote user (on the PPP connection) can send specially crafted data to cause the target kernel to panic.
It
is not known if remote code execution is possible or not.
Pavel Cahyna discovered this vulnerability.
|
Impact: A remote user can cause the target system to crash.
|
Solution: A fix is available from FreeBSD, OpenBSD, and NetBSD.
|
Cause: Boundary error
|
Underlying OS: UNIX (FreeBSD), UNIX (NetBSD), UNIX (OpenBSD)
|
|
Message History:
This archive entry has one or more follow-up message(s) listed below.
|
Source Message Contents
|
Date: Wed, 23 Aug 2006 23:59:11 -0400
Subject: ppp vulnerability on BSD systems
|
CVE-2006-4304
The Point-to-Point Protocol (PPP) implementation on FreeBSD and NetBSD does not
properly validate Line Control Protocol (LCP) options.
A remote user (on the PPP connection) can send specially crafted data to cause the
target kernel to panic.
|
|
