From owner-freebsd-security@FreeBSD.ORG Wed Feb 18 13:25:58 2004 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 3964F16A4D3 for ; Wed, 18 Feb 2004 13:25:58 -0800 (PST) Received: from pegmatite.sentex.ca (pyroxene.sentex.ca [199.212.134.18]) by mx1.FreeBSD.org (Postfix) with ESMTP id 1D69943D2D for ; Wed, 18 Feb 2004 13:25:58 -0800 (PST) (envelope-from damian@sentex.net) Received: by pegmatite.sentex.ca (Postfix, from userid 1001) id 47640B949; Wed, 18 Feb 2004 16:25:57 -0500 (EST) Date: Wed, 18 Feb 2004 16:25:57 -0500 From: Damian Gerow To: freebsd-security@freebsd.org Message-ID: <20040218212557.GK8213@sentex.net> Mail-Followup-To: freebsd-security@freebsd.org References: <20040218142125.49433.qmail@web41902.mail.yahoo.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20040218142125.49433.qmail@web41902.mail.yahoo.com> X-GPG-Key-Id: 0xB841F142 X-GPG-Fingerprint: C7C1 E1D1 EC06 7C86 AF7C 57E6 173D 9CF6 B841 F142 X-Habeas-SWE-1: winter into spring X-Habeas-SWE-2: brightly anticipated X-Habeas-SWE-3: like Habeas SWE (tm) X-Habeas-SWE-4: Copyright 2002 Habeas (tm) X-Habeas-SWE-5: Sender Warranted Email (SWE) (tm). The sender of this X-Habeas-SWE-6: email in exchange for a license for this Habeas X-Habeas-SWE-7: warrant mark warrants that this is a Habeas Compliant X-Habeas-SWE-8: Message (HCM) and not spam. Please report use of this X-Habeas-SWE-9: mark in spam to . User-Agent: Mutt/1.5.4i Subject: Re: is this mbuf problem real? X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Security issues [members-only posting] List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 18 Feb 2004 21:25:58 -0000 Thus spake Baby Peanut (baby_p_nut2@yahoo.com) [18/02/04 16:23]: > Detection: iDEFENSE has confirmed this vulnerability exists in FreeBSD > 5.1 (default install from media). It is expected that it also exists > in earlier versions. Perhaps a better question: Can anyone /confirm/ that it exists in actual stable releases, not just the development branch?