• info
• discussion
• exploit
• solution
• references

OpenBSD Connected Socket Ownership Vulnerability

OpenBSD contains a bug that allows users capable of executing local processes to send signals to processes running on the system belonging to other users. This could result in unpredictable behavior or denial of service against the recipient processes. The default action when SIGIO and SIGURG signals are recieved in OpenBSD is "ignore", but this issue could still affect processes designed to catch these signals.

It should be noted that this vulnerability may affect other BSD-based operating systems.