• info
• discussion
• exploit
• solution
• references

FreeBSD ppp deny_incoming Vulnerability

Solution:
FreeBSD has released a patch to correct this vulnerability.


FreeBSD FreeBSD 3.5

• FreeBSD ppp.patch
  Execute the following commands as root:# cd /usr/src/usr.sbin/ppp# patch -p < /path/to/patch_or_advisory# make depend && make all install
  ftp://ftp.freebsd.org/pub/FreeBSD/CERT/patches/SA-00:70/ppp.patch

FreeBSD FreeBSD 3.5.1

• FreeBSD ppp.patch
  Execute the following commands as root:# cd /usr/src/usr.sbin/ppp# patch -p < /path/to/patch_or_advisory# make depend && make all install
  ftp://ftp.freebsd.org/pub/FreeBSD/CERT/patches/SA-00:70/ppp.patch

FreeBSD FreeBSD 4.0

• FreeBSD ppp.patch
  Execute the following commands as root:# cd /usr/src/usr.sbin/ppp# patch -p < /path/to/patch_or_advisory# make depend && make all install
  ftp://ftp.freebsd.org/pub/FreeBSD/CERT/patches/SA-00:70/ppp.patch

FreeBSD FreeBSD 4.1

• FreeBSD ppp.patch
  Execute the following commands as root:# cd /usr/src/usr.sbin/ppp# patch -p < /path/to/patch_or_advisory# make depend && make all install
  ftp://ftp.freebsd.org/pub/FreeBSD/CERT/patches/SA-00:70/ppp.patch