Date: Mon, 23 Jul 2001 00:29:12 +0300 From: Peter Pentchev <roam@orbitel.bg> To: Anthony Schneider <aschneid@mail.slc.edu> Cc: Matt Dillon <dillon@earth.backplane.com>, Hajimu UMEMOTO <ume@mahoroba.org>, brian@Awfulhak.org, ras@e-gerbil.net, freebsd-security@FreeBSD.ORG, freebsd-gnats-submit@FreeBSD.ORG Subject: Re: bin/22595: telnetd tricked into using arbitrary peer ip Message-ID: <20010723002912.H882@ringworld.oblivion.bg> In-Reply-To: <20010722172232.A94306@mail.slc.edu>; from aschneid@mail.slc.edu on Sun, Jul 22, 2001 at 05:22:32PM -0400 References: <ras@e-gerbil.net> <200107212234.f6LMYUg79964@hak.lan.Awfulhak.org> <20010723.053051.88524825.ume@mahoroba.org> <200107222117.f6MLHwr11669@earth.backplane.com> <20010722172232.A94306@mail.slc.edu>
next in thread | previous in thread | raw e-mail | index | archive | help
Not really; I'd think that utmp structures hold an ASCII string,
not the binary address representation. Thus, the current UT_HOSTSIZE
of 16 is quite enough to hold an IPv4 address (4*3 + 3 dots), but not
nearly enough for full-blown IPv6 addresses.
G'luck,
Peter
--
If this sentence didn't exist, somebody would have invented it.
On Sun, Jul 22, 2001 at 05:22:32PM -0400, Anthony Schneider wrote:
> 16 bytes.
>
> On Sun, Jul 22, 2001 at 02:17:58PM -0700, Matt Dillon wrote:
> >
> > :It is problem of w(1). `w -n' does forward lookup for IPv4 only and
> > :IPv6 is not supported at all. When available, login(1) writes
> > :hostname into utmp instead of IP address. If hostname is saved, `w
> > :-n' queries A RR for the hostname.
> > :Real problem is that UT_HOSTSIZE is too short to hold IPv6 address.
> > :Is there any chance to expand UT_HOSTSIZE in time to 5.0-RELEASE. It
> > :apparently breaks binary compatibility.
> > :
> > :--
> > :Hajimu UMEMOTO @ Internet Mutual Aid Society Yokohama, Japan
> > :ume@mahoroba.org ume@bisd.hitachi.co.jp ume@{,jp.}FreeBSD.org
> >
> > I think if we are going to increase UT_HOSTSIZE, then 5.0 (i.e. now)
> > is exactly the right time to do it. How large does UT_HOSTSIZE
> > have to be to accomodate an IPV6 address?
> >
> > -Matt
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010723002912.H882>