Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 30 Oct 1997 14:28:39 +0100 (MET)
From:      Guido van Rooij <guido@gvr.org>
To:        perhaps@yes.no
Cc:        security-officer@freebsd.org, freebsd-security@freebsd.org, first-teams@first.org
Subject:   Re: FreeBSD Security Advisory: FreeBSD-SA-97:05.open
Message-ID:  <199710301328.OAA08595@gvr.gvr.org>
In-Reply-To: <199710292216.XAA03735@bitbox.follo.net> from Eivind Eklund at "Oct 29, 97 11:16:08 pm"

next in thread | previous in thread | raw e-mail | index | archive | help
Eivind Eklund wrote:
> > =============================================================================
> > FreeBSD-SA-97:05                                            Security Advisory
> >                                                                 FreeBSD, Inc.
> > 
> > Topic:          security compromise via open()
> > 
> > Category:       core
> > Module:         kern
> > Announced:      1997-10-29
> > Affects:        FreeBSD 2.1.*, FreeBSD 2.2.*,
> > 		FreeBSD-stable and FreeBSD-current 
> > Corrected:      FreeBSD-current as of 1997/10/23 (partly even on 1997/04/14)
> > 		FreeBSD-stable as of 1997/10/24
> > 		FreeBSD 2.1-stable as of 1997/10/29
> > FreeBSD only:   yes
> 
> This is not correct.  It affected NetBSD and OpenBSD, too, and was
> originally discovered by a NetBSD developer (and forwarded off the
> NetBSD developers list to best-of-security by someone I'll have mercy
> enough to leave nameless).
> 

But the open problem in itsself does not impose a hole.

-Guido



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199710301328.OAA08595>