From owner-freebsd-security Thu Oct 11 0:10:29 2001 Delivered-To: freebsd-security@freebsd.org Received: from TYO201.gate.nec.co.jp (TYO201.gate.nec.co.jp [202.32.8.214]) by hub.freebsd.org (Postfix) with ESMTP id 1CB0837B406 for ; Thu, 11 Oct 2001 00:10:24 -0700 (PDT) Received: from mailgate4.nec.co.jp ([10.7.69.197]) by TYO201.gate.nec.co.jp (8.11.6/3.7W01080315) with ESMTP id f9B79iO03864; Thu, 11 Oct 2001 16:09:45 +0900 (JST) Received: from mailsv.nec.co.jp (mailgate51.nec.co.jp [10.7.69.196]) by mailgate4.nec.co.jp (8.11.6/3.7W-MAILGATE-NEC) with ESMTP id f9B79hV24109; Thu, 11 Oct 2001 16:09:43 +0900 (JST) Received: from necspl.do.mms.mt.nec.co.jp (necspl.do.mms.mt.nec.co.jp [10.16.5.21]) by mailsv.nec.co.jp (8.11.6/3.7W-MAILSV-NEC) with ESMTP id f9B79fO19666; Thu, 11 Oct 2001 16:09:42 +0900 (JST) Received: from localhost (localhost [127.0.0.1]) by necspl.do.mms.mt.nec.co.jp (8.12.1/8.12.1) with ESMTP id f9B79flC003348; Thu, 11 Oct 2001 16:09:41 +0900 (JST) Date: Thu, 11 Oct 2001 16:09:41 +0900 (JST) Message-Id: <20011011.160941.74753041.y-koga@jp.FreeBSD.org> To: freebsd-security@FreeBSD.ORG Subject: sdiff tmpfile race condition From: Koga Youichirou X-Mailer: Mew version 2.0.58 on Emacs 21.0 / Mule 5.0 (SAKAKI) Mime-Version: 1.0 Content-Type: Text/Plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Hi, I'm afraid that FreeBSD's sdiff has the same vulnerability described in following pages: http://www.kb.cert.org/vuls/id/579982 http://www.securityfocus.com/bid/2191 Does anyone know current status about this? Regards, -- Koga, Youichirou To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message