From owner-cvs-all  Sun Mar 25  1:53:11 2001
Delivered-To: cvs-all@freebsd.org
Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21])
	by hub.freebsd.org (Postfix) with ESMTP
	id 0E72137B719; Sun, 25 Mar 2001 01:53:08 -0800 (PST)
	(envelope-from joerg@FreeBSD.org)
Received: (from joerg@localhost)
	by freefall.freebsd.org (8.11.1/8.11.1) id f2P9r8477986;
	Sun, 25 Mar 2001 01:53:08 -0800 (PST)
	(envelope-from joerg)
Message-Id: <200103250953.f2P9r8477986@freefall.freebsd.org>
From: Joerg Wunsch <joerg@FreeBSD.org>
Date: Sun, 25 Mar 2001 01:53:07 -0800 (PST)
To: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org
Subject: cvs commit: src/sys/net if_spppsubr.c
X-FreeBSD-CVS-Branch: HEAD
Sender: owner-cvs-all@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

joerg       2001/03/25 01:53:07 PST

  Modified files:
    sys/net              if_spppsubr.c 
  Log:
  This is another MFC candidate.
  
  Fix a serious bug in sppp where anyone could obtain a successful PAP
  authentication by supplying a null password.  I've only stumpled across
  the PR while browsing for all sppp-related PRs.
  
  Should we also file a security advisory for this?
  
  PR:		21592
  Submitted by:	<dli@3bc.de> Dirk Liebke
  
  Revision  Changes    Path
  1.66      +3 -3      src/sys/net/if_spppsubr.c


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message