Author: Evgeny Demidov
Date: 2004-06-11 09:20 UTC
To: full-disclosure
CC: bugtraq, security-officer
Subject: [Full-Disclosure] NetBSD kernel swapctl(2) vulnerability
Name: NetBSD kernel swapctl(2) vulnerability
Date: 11 June 2004

CVE candidate: not assigned

Author: Evgeny Demidov

Description:
There exists a integer handling vulnerability in NetBSD swapctl(2) system call.  It seems that this vulnerability cannot be exploited to gain super-user privilegies, but any local attacker can crash the kernel.

Fix:
It is available in CVS:
http://cvsweb.netbsd.org/bsdweb.cgi/src/sys/uvm/uvm_swap.c.diff?r1=1.85&r2=1.85.2.1

History:
The vulnerability has been discovered several months ago by Evgeny Demidov during NetBSD kernel source code audit.  

It has been made availabe to VulnDisco clients two months ago.