OpenBSD 3.4 Security Fixes: SSL DoS, Kerberos Impersonation, Xpm Overflow

Vulnerability Key Information Summary Security Fixes 002: November 1, 2003 - Certain ASN.1-encoded or malformed public keys could cause applications using to suffer denial-of-service attacks. - Source code patch provided for the fix. 009: January 13, 2004 - Multiple message handling errors allowed attackers to delete arbitrary security associations (SAs). - Includes a fix for file descriptor leaks that caused issues when installing encryption cards. 022: May 30, 2004 - A vulnerability in the Kerberos V server could allow a domain administrator to impersonate any principal in any other domain with cross-domain trust relationships. - A fix patch has been released. 030: September 16, 2004 - Stack and integer overflow issues in the library code could be exploited when parsing malicious image files. - Source code patch provided for the fix. Reliability Fixes 003: November 1, 2003 - Local users could crash the system by sending forged ARP requests. - Source code patch provided for the fix. 013: March 8, 2004 - The TCP/IP stack did not impose limits when handling out-of-order TCP segments; attackers could send anomalous TCP segments to exhaust all memory buffers on the system. - Source code patch provided for the fix. Most Critical Vulnerabilities Remote Code Execution and Denial of Service - As noted in security fixes , , and , attackers could execute arbitrary code or disrupt services. - Identifying and fixing these vulnerabilities is critical to protecting systems from major attacks. Memory and Resource Exhaustion under Specific Conditions - As mentioned in , under specific workloads, the kernel could exhaust stack space. Fixing this issue is essential for maintaining system stability and reliability. ``` This information is crucial for understanding and addressing potential security and stability vulnerabilities in OpenBSD 3.4.

Goal Reached Thanks to every supporter — we hit 100%!

OpenBSD 3.4 Security Fixes: SSL DoS, Kerberos Impersonation, Xpm Overflow