Re: FreeBSD Security Advisory FreeBSD-SA-08:02.libc

At 12:22 AM 1/15/2008, Mark Andrews wrote:
>
> For the "usual suspects" of applications running, (e.g. sendmail,
> apache, BIND etc) would it be possible to pass crafted packets
> through to this function remotely via those apps ? ie how easy is this to do
> ?

The usual suspects don't call inet_network().
route calls inet_network() but not routed doesn't.

Thanks to all who responded so far! I had a look at some of the ports I am using and so far all I found was

find . -name "*.c" | xargs grep inet_network
./apache13-modssl/work/apache_1.3.33/src/modules/proxy/proxy_util.c: if (host[i] == '\0' && (ap_inet_addr(host) == -1 || inet_network(host) == -1))

---Mike

_______________________________________________
freebsd-security@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribe@xxxxxxxxxxx"

Relevant Pages

  • help with building gcc
    ... we have kept the important services (bind, sendmail, apache, etc...) up to ... to update gcc to 4.0.1, but are in Makefile hell - we get a bit further,and ...
    (comp.unix.tru64)
  • Re: controversial paper
    ... >> You mean like all the ones that haven't been discovered for Apache, ... >> BIND, and Sendmail? ... On Windows no matter what I do, ...
    (sci.crypt)