From owner-freebsd-security  Tue Oct 22 10: 3:47 2002
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 7E30637B401
	for <security@freebsd.org>; Tue, 22 Oct 2002 10:03:45 -0700 (PDT)
Received: from obsidian.sentex.ca (obsidian.sentex.ca [64.7.128.101])
	by mx1.FreeBSD.org (Postfix) with ESMTP id D2AFF43E42
	for <security@freebsd.org>; Tue, 22 Oct 2002 10:03:01 -0700 (PDT)
	(envelope-from mike@sentex.net)
Received: from simian.sentex.net (pyroxene.sentex.ca [199.212.134.18])
	by obsidian.sentex.ca (8.12.6/8.12.6) with ESMTP id g9MH2kTt004065;
	Tue, 22 Oct 2002 13:02:46 -0400 (EDT)
	(envelope-from mike@sentex.net)
Message-Id: <5.1.1.6.0.20021022122100.042c2288@marble.sentex.ca>
X-Sender: mdtpop@marble.sentex.ca
X-Mailer: QUALCOMM Windows Eudora Version 5.1.1
Date: Tue, 22 Oct 2002 13:03:55 -0400
To: Larry Sica <lomifeh@earthlink.net>
From: Mike Tancsa <mike@sentex.net>
Subject: Re: [Full-Disclosure] NetBSD Security Advisory 2002-016:
  Insufficient length check in ESP authentication data
Cc: security@freebsd.org
In-Reply-To: <61D7D206-E5D9-11D6-ABF5-000393A335A2@earthlink.net>
References: <5.1.1.6.0.20021021211946.05c98cf8@marble.sentex.ca>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"; format=flowed
X-Virus-Scanned: By Sentex Communications (obsidian/20020517)
X-Spam-Status: No, hits=-4.7 required=5.0
	tests=IN_REP_TO,REFERENCES,SPAM_PHRASE_00_01
	version=2.41
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org


Thanks!  I didnt look at the secondary hyperlink :-(

         ---Mike

At 12:14 PM 22/10/2002 -0400, Larry Sica wrote:

>On Monday, October 21, 2002, at 09:21 PM, Mike Tancsa wrote:
>
>>>
>>>http://www.kb.cert.org/vuls/id/459371
>
>Read this, if you click on FreeBSD the url it goes to states it has been 
>addressed in 4.7.
>
>http://www.kb.cert.org/vuls/id/AAMN-5DGQDT
>
>--Larry


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message