DragonFly BSD
DragonFly commits List (threaded) for 2011-12
[Date Prev][Date Next]  [Thread Prev][Thread Next]  [Date Index][Thread Index]

git: DragonFly_RELEASE_2_10 telnetd: Validate key length prior to copying into a fixed buffer.


From: Peter Avalos <pavalos@xxxxxxxxxxxxxxxxxxxxxxx>
Date: Fri, 23 Dec 2011 10:27:43 -0800 (PST)

commit 75df574506ea14695f2e86f863d312d284086d6d
Author: Peter Avalos <pavalos@dragonflybsd.org>
Date:   Fri Dec 23 10:16:31 2011 -0800

    telnetd:  Validate key length prior to copying into a fixed buffer.
    
    It's possible for a remote attacker to execute arbitrary code with the
    privileges of the telnetd daemon (normally root) prior to this fix.
    CVE-2011-4862
    
    Obtained-from:   FreeBSD-SA-11:08.telnetd

Summary of changes:
 lib/libtelnet/encrypt.c |    3 +++
 1 files changed, 3 insertions(+), 0 deletions(-)

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/75df574506ea14695f2e86f863d312d284086d6d


-- 
DragonFly BSD source repository



[Date Prev][Date Next]  [Thread Prev][Thread Next]  [Date Index][Thread Index]