From owner-freebsd-security  Mon Apr 29 14:49:34 2002
Delivered-To: freebsd-security@freebsd.org
Received: from elvis.mu.org (elvis.mu.org [192.203.228.196])
	by hub.freebsd.org (Postfix) with ESMTP id 2FA2A37B400
	for <freebsd-security@FreeBSD.ORG>; Mon, 29 Apr 2002 14:49:30 -0700 (PDT)
Received: by elvis.mu.org (Postfix, from userid 1192)
	id 678E5AE165; Mon, 29 Apr 2002 14:49:29 -0700 (PDT)
Date: Mon, 29 Apr 2002 14:49:29 -0700
From: Alfred Perlstein <bright@mu.org>
To: Piotr Wiejaczka <wiejak@alpha.net.pl>
Cc: freebsd-security@FreeBSD.ORG
Subject: Re: syslogd security bug?
Message-ID: <20020429214929.GK1530@elvis.mu.org>
References: <20020429233943.A213@microsoft.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <20020429233943.A213@microsoft.com>
User-Agent: Mutt/1.3.27i
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

* Piotr Wiejaczka <wiejak@alpha.net.pl> [020429 14:44] wrote:
> Hi all.
> 
> %uname -a
> FreeBSD localhost 4.5-STABLE FreeBSD 4.5-STABLE #1: Tue Mar 12 08:20:11 CET
> 2002     root@:/usr/src/sys/compile/OKO2  i386
> 
> %cat syslog.c
> #include <syslog.h>
> #include <stdarg.h>
>  
> int main(int argc, char *argv[])
> {
>         syslog(LOG_EMERG, argv[1]);
> }
>  
> %./syslog "blah %x %x %x %x"
>  
> Message from syslogd@localhost at Mon Apr 29 23:27:35 2002 ...
> localhost syslog: blah 2807aebe 2 bfbffc5c bfbffd26
> 
>  
> Looks like we have a format string bug inside syslogd :) 

You're kidding right?

Please read the syslog(3) manpage.

-- 
-Alfred Perlstein [alfred@freebsd.org]
'Instead of asking why a piece of software is using "1970s technology,"
 start asking why software is ignoring 30 years of accumulated wisdom.'
Tax deductible donations for FreeBSD: http://www.freebsdfoundation.org/

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message