From owner-freebsd-security  Tue Mar 12  7:49:36 2002
Delivered-To: freebsd-security@freebsd.org
Received: from gw.nectar.cc (gw.nectar.cc [208.42.49.153])
	by hub.freebsd.org (Postfix) with ESMTP
	id BC0C137B402; Tue, 12 Mar 2002 07:49:25 -0800 (PST)
Received: from madman.nectar.cc (madman.nectar.cc [10.0.1.111])
	by gw.nectar.cc (Postfix) with ESMTP
	id AFA3144; Tue, 12 Mar 2002 09:47:19 -0600 (CST)
Received: (from nectar@localhost)
	by madman.nectar.cc (8.11.6/8.11.6) id g2CFlJc36466;
	Tue, 12 Mar 2002 09:47:19 -0600 (CST)
	(envelope-from nectar)
Date: Tue, 12 Mar 2002 09:47:19 -0600
From: "Jacques A. Vidrine" <nectar@FreeBSD.ORG>
To: Mike Tancsa <mike@sentex.net>
Cc: "Brian F. Feldman" <green@FreeBSD.ORG>,
	freebsd-security@FreeBSD.ORG, jedgar@FreeBSD.ORG
Subject: Re: zlib and FreeBSD (was Re: RedHat advisory - RHSA-2002:026-35 zlib double free -- Is this 4.5-R-p1?)
Message-ID: <20020312154719.GK35955@madman.nectar.cc>
Mail-Followup-To: "Jacques A. Vidrine" <nectar@FreeBSD.org>,
	Mike Tancsa <mike@sentex.net>,
	"Brian F. Feldman" <green@FreeBSD.ORG>, freebsd-security@FreeBSD.ORG,
	jedgar@FreeBSD.ORG
References: <20020312145337.GB35955@madman.nectar.cc> <5.1.0.14.0.20020312102633.027e5e40@marble.sentex.ca>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <5.1.0.14.0.20020312102633.027e5e40@marble.sentex.ca>
User-Agent: Mutt/1.3.27i
X-Url: http://www.nectar.cc/
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

On Tue, Mar 12, 2002 at 10:29:06AM -0500, Mike Tancsa wrote:
> Hi,
> Although it sounds like the bug is not exploitable on FreeBSD, is there a 
> potential for a Denial of Service still with systems prior to the Feb 22 
> commit?

I hesitate to say that there is not, but I don't know of anything
specific.

-- 
Jacques A. Vidrine <n@nectar.cc>                 http://www.nectar.cc/
NTT/Verio SME          .     FreeBSD UNIX     .       Heimdal Kerberos
jvidrine@verio.net     .  nectar@FreeBSD.org  .          nectar@kth.se

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message