Secunia

A vulnerability has been reported in OpenBSD's systrace, which can be exploited by malicious, local users to gain knowledge of potentially sensitive information, cause a DoS (Denial of Service) and gain escalated privileges.

The vulnerability is caused due to an integer overflow within the "systrace_preprepl()" function. By sending large integer values to the ioctl() syscall, this can be exploited to read kernel memory, cause a DoS or gain escalated privileges.

Note: This issue was also reported in NetBSD 3.

Solution
Apply patches.
Further details available in Customer Area

Provided and/or discovered by
Chris Evans

Changelog
Further details available in Customer Area

Original Advisory
http://openbsd.org/errata.html#systrace
http://scary.beasts.org/security/CESA-2006-003.html

Deep Links
Links available in Customer Area