[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
pctr bug in 2.3
- To: announce_(_at_)_openbsd_(_dot_)_org
- Subject: pctr bug in 2.3
- From: Jason Downs <downsj_(_at_)_downsj_(_dot_)_com>
- Date: Thu, 04 Jun 1998 10:56:44 -0700
- Delivery-date: Thu Jun 4 11:04:38 1998
pctr is a pseudo-device driver enabled by default in i386 OpenBSD 2.3. It has
recently been shown that the driver has several problems on non-Intel i386
processors. This problem also exists in earlier releases.
If you have a non-Intel i386 system, and the pctr driver successfully
attaches, any user may crash the system by running the pctr(1) command.
Cyrix M2 based systems are especially vulnerable; it is expected that AMD
K6 and K5 systems are as well.
You must recompile your kernel with the pctr driver removed in order to
avoid this problem. Remove the line ``pseudo-device pctr 1''
from your kernel configuration file, reconfig, and rebuild the kernel.
As always, please check out http://www.openbsd.org/security.html.
Jason Downs (360) 694-3110