Date: Fri, 29 Sep 2000 20:33:41 -0500 From: "Jacques A. Vidrine" <n@nectar.com> To: freebsd-current@freebsd.org Subject: Fwd: [cvs commit: src/lib/libc/net hesiod.c] Message-ID: <20000929203340.D69244@hamlet.nectar.com>
next in thread | raw e-mail | index | archive | help
If you have machines running -CURRENT from September 9 - September
29, _and_ you created an /etc/nsswitch.conf with any of `passwd: dns',
`group: dns', `passwd_compat: dns', `group_compat: dns', then you
are vulnerable to a local attack.
So upgrade :-)
(or just apply the small patch)
--
Jacques Vidrine / n@nectar.com / jvidrine@verio.net / nectar@FreeBSD.org
----- Forwarded message from Jacques Vidrine <nectar@FreeBSD.org> -----
Date: Fri, 29 Sep 2000 05:56:34 -0700 (PDT)
From: Jacques Vidrine <nectar@FreeBSD.org>
To: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org
Subject: cvs commit: src/lib/libc/net hesiod.c
nectar 2000/09/29 05:56:34 PDT
Modified files:
lib/libc/net hesiod.c
Log:
Ignore HESIOD_CONFIG and HES_DOMAIN environmental variables for
set-user-ID and set-group-ID programs.
Suggested by: Danny Braniss <danny@cs.huji.ac.il>
Revision Changes Path
1.2 +13 -3 src/lib/libc/net/hesiod.c
----- End forwarded message -----
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-current" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20000929203340.D69244>