From owner-freebsd-security Tue Nov 7 22:38:53 2000 Delivered-To: freebsd-security@freebsd.org Received: from citusc17.usc.edu (citusc17.usc.edu [128.125.38.177]) by hub.freebsd.org (Postfix) with ESMTP id 09FFB37B479 for ; Tue, 7 Nov 2000 22:38:51 -0800 (PST) Received: (from kris@localhost) by citusc17.usc.edu (8.11.1/8.11.1) id eA86d6I41382; Tue, 7 Nov 2000 22:39:06 -0800 (PST) (envelope-from kris) Date: Tue, 7 Nov 2000 22:39:05 -0800 From: Kris Kennaway To: Wes Peters Cc: security@FreeBSD.ORG Subject: Re: FreeBSD Security Advisory: FreeBSD-SA-00:61.tcpdump [REISSUED] Message-ID: <20001107223905.A41350@citusc17.usc.edu> References: <20001106195827.5C6BA37B4CF@hub.freebsd.org> <3A0849C0.750F0EF6@softweyr.com> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-md5; protocol="application/pgp-signature"; boundary="h31gzZEtNLTqOjlF" Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <3A0849C0.750F0EF6@softweyr.com>; from wes@softweyr.com on Tue, Nov 07, 2000 at 11:28:16AM -0700 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org --h31gzZEtNLTqOjlF Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Tue, Nov 07, 2000 at 11:28:16AM -0700, Wes Peters wrote: > FreeBSD Security Advisories wrote: > >=20 > > II. Problem Description > >=20 > > Several overflowable buffers were discovered in the version of tcpdump > > included in FreeBSD, during internal source code auditing. >=20 > Does this problem manifest itself in the ethereal port as well? I don't= =20 > know how closely related the code between the two might be. I've taken > a cursory look and it isn't identical, but tcpdump is mentioned several > places in the source. Could be - I haven't checked. Someone should do that. Kris --h31gzZEtNLTqOjlF Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.4 (FreeBSD) Comment: For info see http://www.gnupg.org iEYEARECAAYFAjoI9QkACgkQWry0BWjoQKUwkgCffnrLeImUDTumYHrgBMfQLczF XUsAoL4JnWN7gpI+9cH1rFRQjStdoTRx =4V/I -----END PGP SIGNATURE----- --h31gzZEtNLTqOjlF-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message