Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 25 Mar 2001 01:53:07 -0800 (PST)
From:      Joerg Wunsch <joerg@FreeBSD.org>
To:        cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org
Subject:   cvs commit: src/sys/net if_spppsubr.c
Message-ID:  <200103250953.f2P9r8477986@freefall.freebsd.org>

next in thread | raw e-mail | index | archive | help
joerg       2001/03/25 01:53:07 PST

  Modified files:
    sys/net              if_spppsubr.c 
  Log:
  This is another MFC candidate.
  
  Fix a serious bug in sppp where anyone could obtain a successful PAP
  authentication by supplying a null password.  I've only stumpled across
  the PR while browsing for all sppp-related PRs.
  
  Should we also file a security advisory for this?
  
  PR:		21592
  Submitted by:	<dli@3bc.de> Dirk Liebke
  
  Revision  Changes    Path
  1.66      +3 -3      src/sys/net/if_spppsubr.c


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200103250953.f2P9r8477986>