tcpdump mailing list archives
Automatic report from sources (tcpdump libpcap htdocs) between 06.01.2004 - 07.01.2004 GMT
From: "Automatic cvs log generator /tcpdump/bin/makelog" <mcr () sandelman ottawa on ca>
Date: Wed, 7 Jan 2004 05:06:31 -0500 (EST)
CVS log entries from 06.01.2004 (Tue) 10:05:26 - 07.01.2004 (Wed) 10:05:28 GMT
=====================================================
Summary by authors
=====================================================
Author: hannes
File: tcpdump/CREDITS; Revisions: 1.91, 1.87.2.3
File: tcpdump/print-isakmp.c; Revisions: 1.42, 1.36.2.6
File: tcpdump/print-radius.c; Revisions: 1.24, 1.19.2.3
=====================================================
Combined list of identical log entries
=====================================================
Description:
bugfix from Jonathan Heusser <jonny () drugphish ch>
The first critical piece of code is found in print-isakmp.c:332. The
function rawprint() does not check its arguments thus it's easy for
an attacker to pass a big 'len' or a bogus 'loc' leading to a
segmentation fault in the for loop.
The second bug is located in print-radius.c:471. The for loop of
print_attr_string() is written in an unsafe manner. 'length'
and 'data' should be checked.
Modified files:
File: tcpdump/CREDITS; Revision: 1.91;
Date: 2004/01/07 08:00:52; Author: hannes; Lines: (+1 -0)
File: tcpdump/CREDITS; Revision: 1.87.2.3;
Date: 2004/01/07 07:53:17; Author: hannes; Lines: (+1 -0)
File: tcpdump/print-isakmp.c; Revision: 1.42;
Date: 2004/01/07 08:00:51; Author: hannes; Lines: (+9 -1)
File: tcpdump/print-isakmp.c; Revision: 1.36.2.6;
Date: 2004/01/07 07:53:17; Author: hannes; Lines: (+9 -1)
File: tcpdump/print-radius.c; Revision: 1.24;
Date: 2004/01/07 08:00:52; Author: hannes; Lines: (+2 -2)
File: tcpdump/print-radius.c; Revision: 1.19.2.3;
Date: 2004/01/07 07:53:17; Author: hannes; Lines: (+2 -2)
=====================================================
Log entries
=====================================================
=====================================================
Summary of modified files
=====================================================
File: tcpdump/CREDITS
Revisions: 1.91, 1.87.2.3
Authors: hannes (+1 -0), hannes (+1 -0)
-------------------------------
File: tcpdump/print-isakmp.c
Revisions: 1.42, 1.36.2.6
Authors: hannes (+9 -1), hannes (+9 -1)
-------------------------------
File: tcpdump/print-radius.c
Revisions: 1.24, 1.19.2.3
Authors: hannes (+2 -2), hannes (+2 -2)
--
Automatic cron job from /tcpdump/bin/makelog
-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:tcpdump-workers-request () tcpdump org?body=unsubscribe
Current thread:
- Automatic report from sources (tcpdump libpcap htdocs) between 06.01.2004 - 07.01.2004 GMT Automatic cvs log generator /tcpdump/bin/makelog (Jan 07)
