From owner-freebsd-security Wed Jan 31 12:33:08 1996 Return-Path: owner-security Received: (from root@localhost) by freefall.freebsd.org (8.7.3/8.7.3) id MAA07558 for security-outgoing; Wed, 31 Jan 1996 12:33:08 -0800 (PST) Received: from alpha.xerox.com (alpha.Xerox.COM [13.1.64.93]) by freefall.freebsd.org (8.7.3/8.7.3) with SMTP id MAA07553 for ; Wed, 31 Jan 1996 12:33:06 -0800 (PST) Received: from crevenia.parc.xerox.com ([13.2.116.11]) by alpha.xerox.com with SMTP id <15055(6)>; Wed, 31 Jan 1996 12:32:31 PST Received: from localhost ([127.0.0.1]) by crevenia.parc.xerox.com with SMTP id <177479>; Wed, 31 Jan 1996 12:32:23 -0800 X-Mailer: exmh version 1.6.4 10/10/95 To: security@freebsd.org Subject: Re: BoS: bind() Security Problems In-reply-to: Your message of "Tue, 30 Jan 1996 15:18:21 PST." Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Date: Wed, 31 Jan 1996 12:32:12 PST From: Bill Fenner Message-Id: <96Jan31.123223pst.177479@crevenia.parc.xerox.com> Sender: owner-security@freebsd.org Precedence: bulk My only comment is that Alan's stronger version of the patch will break at least xntpd, which binds to each address as well as INADDR_ANY. I don't have the time right now to think this through any further. Bill