FreeBSD Kernel Vulnerable
According to an advisory released today, the kernel is vulnerable to a denial of service issue, with possible privelege escalation. It seems that all FreeBSD (RELENG_4.X0 versions >= 4.3 are vulnerable, BUT FreeBSD RELENG_5.X IS NOT vulnerable. For more information on this one, see [Full-Disclosure] PINE-CERT-20030901: Integer Overflow in FreeBSD Kernel [fhold]
There is a second advisory as well from Pine Digital Security, regarding a more serious issue namely an interger overflow vulnerability that affects all versions of FreeBSD. For more information, see [Full-Disclosure] PINE-CERT-20030902: Integer Overflow in FreeBSD Kernel [uio]
Wkd..
