From owner-freebsd-security@FreeBSD.ORG Thu Oct 2 10:45:33 2003 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 367E716A4B3 for ; Thu, 2 Oct 2003 10:45:33 -0700 (PDT) Received: from gw.celabo.org (gw.celabo.org [208.42.49.153]) by mx1.FreeBSD.org (Postfix) with ESMTP id 5104644030 for ; Thu, 2 Oct 2003 10:45:08 -0700 (PDT) (envelope-from nectar@celabo.org) Received: from madman.celabo.org (madman.celabo.org [10.0.1.111]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client CN "madman.celabo.org", Issuer "celabo.org CA" (verified OK)) by gw.celabo.org (Postfix) with ESMTP id 97D085485D for ; Thu, 2 Oct 2003 12:45:05 -0500 (CDT) Received: by madman.celabo.org (Postfix, from userid 1001) id 2A9B46D476; Thu, 2 Oct 2003 12:45:05 -0500 (CDT) Date: Thu, 2 Oct 2003 12:45:05 -0500 From: "Jacques A. Vidrine" To: freebsd-security@FreeBSD.org Message-ID: <20031002174505.GA66829@madman.celabo.org> Mail-Followup-To: "Jacques A. Vidrine" , freebsd-security@FreeBSD.org References: <20031002170844.GA66592@madman.celabo.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20031002170844.GA66592@madman.celabo.org> X-Url: http://www.celabo.org/ User-Agent: Mutt/1.5.4i-ja.1 Subject: Workaround for procfs (was Re: HEADS UP: upcoming security advisories) X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Security issues [members-only posting] List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 02 Oct 2003 17:45:33 -0000 On Thu, Oct 02, 2003 at 12:08:44PM -0500, Jacques A. Vidrine wrote: > FreeBSD-SA-03:17.procfs > Several similar bugs involving integer arithmetic underflows > or overflows were identified, again by Joost Pol. These bugs > could also lead to kernel memory disclosure or system panic. > Fixes for this issue are in -CURRENT and -STABLE. The security > branches will be addressed during the rest of the day. > Regarding this issue: A simple workaround is to unmount /proc. Execute the following command as root: umount -a -t procfs Also, remove or comment out any lines in fstab(5) that reference `procfs', so that it will not be re-mounted at next reboot. Cheers, -- Jacques Vidrine . NTT/Verio SME . FreeBSD UNIX . Heimdal nectar@celabo.org . jvidrine@verio.net . nectar@freebsd.org . nectar@kth.se