Date: Mon, 12 Mar 2001 14:38:24 -0800 From: Kris Kennaway <kris@obsecurity.org> To: Mikhail Teterin <mi@FreeBSD.org> Cc: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: Re: cvs commit: ports/net/scotty3 Makefile pkg-plist ports/net/scotty3/files patch-fixes scotty.c patch-ac patch-ad Message-ID: <20010312143824.B86831@mollari.cthul.hu> In-Reply-To: <200103121850.f2CIoYl73269@freefall.freebsd.org>; from mi@FreeBSD.org on Mon, Mar 12, 2001 at 10:50:34AM -0800 References: <200103121850.f2CIoYl73269@freefall.freebsd.org>
next in thread | previous in thread | raw e-mail | index | archive | help
[-- Attachment #1 --] On Mon, Mar 12, 2001 at 10:50:34AM -0800, Mikhail Teterin wrote: > mi 2001/03/12 10:50:34 PST > > Modified files: > net/scotty3 Makefile pkg-plist > net/scotty3/files patch-ac patch-ad > Added files: > net/scotty3/files patch-fixes scotty.c > Log: > A number of changes and fixes: > . build with or without TK (triggered by the NO_X knob) > . build against TCL-8.3 -- with or without stubs > . fix some bugs in the core Scotty code -- most notably > a bug in the icmp-command implementation, where an off-by-one > error in the argument processing loop resulted in random > crashes; all this fixes are grouped into a single file > patch-fixes > . make scotty executable itself as small as it needs to be > > Approved by: maintainer > > Perhaps, some day the security officer will tell me what _exactly_ is > wrong with regular Scotty (this one is beta of the new version), and > I'll be able to freshen that one up too and remove the FORBIDDEN. Sorry, I don't recall you ever having asked. As I recall, there are a number of buffer overflows in command-line arguments of setugid programs: <command> [-flag] `perl -e 'print "a"x5000'` Kris [-- Attachment #2 --] -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.4 (FreeBSD) Comment: For info see http://www.gnupg.org iD8DBQE6rU/gWry0BWjoQKURAjm4AKCv7OFViQ/P157MxTi72eqXT4m6dgCg5gct XoV1Hd23ugB7h/6+fT0r2RM= =iuX4 -----END PGP SIGNATURE-----
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010312143824.B86831>