From owner-freebsd-security  Thu Jan 17  0:47:46 2002
Delivered-To: freebsd-security@freebsd.org
Received: from TYO201.gate.nec.co.jp (TYO201.gate.nec.co.jp [202.32.8.214])
	by hub.freebsd.org (Postfix) with ESMTP id 287DB37B400
	for <freebsd-security@FreeBSD.ORG>; Thu, 17 Jan 2002 00:47:38 -0800 (PST)
Received: from mailgate4.nec.co.jp ([10.7.69.197])
	by TYO201.gate.nec.co.jp (8.11.6/3.7W01080315) with ESMTP id g0H8lRf01355;
	Thu, 17 Jan 2002 17:47:27 +0900 (JST)
Received: from mailsv4.nec.co.jp (mailgate51.nec.co.jp [10.7.69.190]) by mailgate4.nec.co.jp (8.11.6/3.7W-MAILGATE-NEC) with ESMTP
	id g0H8lLI05537; Thu, 17 Jan 2002 17:47:21 +0900 (JST)
Received: from necspl.do.mms.mt.nec.co.jp (necspl.do.mms.mt.nec.co.jp [10.16.5.21]) by mailsv4.nec.co.jp (8.11.6/3.7W-MAILSV4-NEC) with ESMTP
	id g0H8lAG22287; Thu, 17 Jan 2002 17:47:20 +0900 (JST)
Received: from localhost (localhost [127.0.0.1])
	by  necspl.do.mms.mt.nec.co.jp (8.12.2/8.12.2) with ESMTP id g0H8lAXX011869;
	Thu, 17 Jan 2002 17:47:10 +0900 (JST)
Date: Thu, 17 Jan 2002 17:47:09 +0900 (JST)
Message-Id: <20020117.174709.28435197.y-koga@jp.FreeBSD.org>
To: freebsd-security@FreeBSD.ORG
Subject: Re: sdiff tmpfile race condition
From: Koga Youichirou <y-koga@jp.FreeBSD.org>
In-Reply-To: <20011011.160941.74753041.y-koga@jp.FreeBSD.org>
References: <20011011.160941.74753041.y-koga@jp.FreeBSD.org>
X-Mailer: Mew version 3.0.52 on Emacs 21.1 / Mule 5.0 (SAKAKI)
Mime-Version: 1.0
Content-Type: Text/Plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

> I'm afraid that FreeBSD's sdiff has the same vulnerability described
> in following pages:
> 
> http://www.kb.cert.org/vuls/id/579982

typo...
http://www.kb.cert.org/vuls/id/579928

> http://www.securityfocus.com/bid/2191
> 
> Does anyone know current status about this?

Regards,

-- Koga, Youichirou

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message