From owner-freebsd-security@FreeBSD.ORG Thu Mar 17 23:59:31 2005 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 347C016A4CE for ; Thu, 17 Mar 2005 23:59:31 +0000 (GMT) Received: from pd4mo3so.prod.shaw.ca (shawidc-mo1.cg.shawcable.net [24.71.223.10]) by mx1.FreeBSD.org (Postfix) with ESMTP id EB50343D1F for ; Thu, 17 Mar 2005 23:59:30 +0000 (GMT) (envelope-from cperciva@freebsd.org) Received: from pd5mr7so.prod.shaw.ca (pd5mr7so-qfe3.prod.shaw.ca [10.0.141.183]) by l-daemon (Sun ONE Messaging Server 6.0 HotFix 1.01 (built Mar 15 2004)) with ESMTP id <0IDI00M3YT9X4F10@l-daemon> for freebsd-security@freebsd.org; Thu, 17 Mar 2005 16:58:45 -0700 (MST) Received: from pn2ml2so.prod.shaw.ca ([10.0.121.146]) by pd5mr7so.prod.shaw.ca (Sun ONE Messaging Server 6.0 HotFix 1.01 (built Mar 15 2004)) with ESMTP id <0IDI00H9WT9V2YB0@pd5mr7so.prod.shaw.ca> for freebsd-security@freebsd.org; Thu, 17 Mar 2005 16:58:43 -0700 (MST) Received: from [192.168.0.60] (S0106006067227a4a.vc.shawcable.net [24.87.209.6]) by l-daemon (iPlanet Messaging Server 5.2 HotFix 1.18 (built Jul 28 2003)) freebsd-security@freebsd.org; Thu, 17 Mar 2005 16:58:43 -0700 (MST) Date: Thu, 17 Mar 2005 15:58:42 -0800 From: Colin Percival In-reply-to: <423A1842.4050603@open-networks.net> To: Timothy Smith Message-id: <423A19B2.7000602@freebsd.org> MIME-version: 1.0 Content-type: text/plain; charset=ISO-8859-1 Content-transfer-encoding: 7bit X-Accept-Language: en-us, en X-Enigmail-Version: 0.90.1.0 X-Enigmail-Supports: pgp-inline, pgp-mime References: <423A1842.4050603@open-networks.net> User-Agent: Mozilla Thunderbird 1.0 (X11/20050314) cc: freebsd-security@freebsd.org Subject: Re: no patch, is there a problem X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Security issues [members-only posting] List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 17 Mar 2005 23:59:31 -0000 Timothy Smith wrote: > http://www.securityfocus.com/bid/12825/info/ > > no patch or anything, is there any action on this? We're not affected. The problem is in copyoutstr(), which doesn't exist in FreeBSD. I've sent an email to securityfocus advising them of this. Colin Percival