All current and prior versions of FreeBSD and OpenBSD distributions with procfs and mounted enabled are vulnerable. Users that provide a malformed arguments in a request to hit-highlight a document can read arbitrary files on the server regardless of security permissions. Microsoft Windows NT 4.0, Terminal Server Edition. The file permissions are for a global read. Consequently, local users can open the file and read the registry enumeration information.
Local users can overwrite files on the system.
This can be exploited to flood a target system with packets, resulting in a denial of service. This allows remote users to gain the privileges of the authentication module. K2's personal homepage - UNIX and network security information. System - Smart honeypot system simulating nine different operating systems with powerful intelligence features. Also available as Mailing List.