diff options
| author | sheldonh <sheldonh@FreeBSD.org> | 2003-01-13 16:07:08 +0000 |
|---|---|---|
| committer | sheldonh <sheldonh@FreeBSD.org> | 2003-01-13 16:07:08 +0000 |
| commit | fe207e7222b70e3afdc0d60d6c9d9097403f1d02 (patch) | |
| tree | 782844748399536840e5b7e38e6c0c4d602ce9fe /mail/exim-old | |
| parent | eef4b47510fa634f02a5a6ae7284e49cb667339f (diff) | |
| download | FreeBSD-ports-fe207e7222b70e3afdc0d60d6c9d9097403f1d02.zip FreeBSD-ports-fe207e7222b70e3afdc0d60d6c9d9097403f1d02.tar.gz | |
Fix a format string vulnerability that could be exploited by an Exim
admin user to gain root privelege.
Diffstat (limited to 'mail/exim-old')
| -rw-r--r-- | mail/exim-old/Makefile | 1 | ||||
| -rw-r--r-- | mail/exim-old/files/patch-src::daemon.c | 37 |
2 files changed, 38 insertions, 0 deletions
diff --git a/mail/exim-old/Makefile b/mail/exim-old/Makefile index 35c0f01..1fbd7dc 100644 --- a/mail/exim-old/Makefile +++ b/mail/exim-old/Makefile @@ -7,6 +7,7 @@ PORTNAME= exim PORTVERSION= 3.36 +PORTREVISION= 1 CATEGORIES= mail MASTER_SITES= ftp://ftp.csx.cam.ac.uk/pub/software/email/exim/exim3/ \ http://www.exim.org/ftp/exim3/ \ diff --git a/mail/exim-old/files/patch-src::daemon.c b/mail/exim-old/files/patch-src::daemon.c new file mode 100644 index 0000000..ab68b92 --- /dev/null +++ b/mail/exim-old/files/patch-src::daemon.c @@ -0,0 +1,37 @@ +*** src/daemon.c Thu Apr 4 13:56:16 2002 +--- src/daemon.c Wed Dec 4 11:01:39 2002 +*************** +*** 590,596 **** + if (pid_file_path[0] == 0) + sprintf(buff, "%s/exim-daemon.pid", spool_directory); + else +! sprintf(buff, pid_file_path, ""); + } + else + { +--- 590,596 ---- + if (pid_file_path[0] == 0) + sprintf(buff, "%s/exim-daemon.pid", spool_directory); + else +! strcpy(buff, pid_file_path); + } + else + { +*************** +*** 598,606 **** + sprintf(buff, "%s/exim-daemon.%d.pid", spool_directory, smtp_port); + else + { +! char dbuff[12]; +! sprintf(dbuff, ".%d", smtp_port); +! sprintf(buff, pid_file_path, dbuff); + } + } + +--- 598,604 ---- + sprintf(buff, "%s/exim-daemon.%d.pid", spool_directory, smtp_port); + else + { +! strcpy(buff, pid_file_path); + } + } |
