diff options
| author | kris <kris@FreeBSD.org> | 2002-06-07 01:16:21 +0000 |
|---|---|---|
| committer | kris <kris@FreeBSD.org> | 2002-06-07 01:16:21 +0000 |
| commit | 2b91036f517808981c9c6d2a49bf4861936d18d9 (patch) | |
| tree | 677cf4c80425762a0442938b885d70863ed85463 /security/fakebo | |
| parent | d5c16a1ef3ae166bd36b322e09078810c42b4438 (diff) | |
| download | FreeBSD-ports-2b91036f517808981c9c6d2a49bf4861936d18d9.zip FreeBSD-ports-2b91036f517808981c9c6d2a49bf4861936d18d9.tar.gz | |
Fix a format string vulnerability which appears to be exploitable, and
bump PORTREVISION.
Diffstat (limited to 'security/fakebo')
| -rw-r--r-- | security/fakebo/Makefile | 1 | ||||
| -rw-r--r-- | security/fakebo/files/patch-aa | 11 | ||||
| -rw-r--r-- | security/fakebo/files/patch-ab | 13 |
3 files changed, 25 insertions, 0 deletions
diff --git a/security/fakebo/Makefile b/security/fakebo/Makefile index aeb0b7e..184054d 100644 --- a/security/fakebo/Makefile +++ b/security/fakebo/Makefile @@ -7,6 +7,7 @@ PORTNAME= fakebo PORTVERSION= 0.4.1 +PORTREVISION= 1 CATEGORIES= security MASTER_SITES= ftp://the.ausmac.net/wd2a/security/port-loggers/ \ ftp://ftp.mayn.de/pub/unix/security/network/ \ diff --git a/security/fakebo/files/patch-aa b/security/fakebo/files/patch-aa new file mode 100644 index 0000000..9c47d7e --- /dev/null +++ b/security/fakebo/files/patch-aa @@ -0,0 +1,11 @@ +--- misc.c.orig Thu Jun 6 18:11:32 2002 ++++ misc.c Thu Jun 6 18:11:41 2002 +@@ -107,7 +107,7 @@ + + #ifdef HAVE_OPENLOG + openlog("FakeBO", LOG_CONS, LOG_USER); +- syslog(LOG_WARNING, buf); ++ syslog(LOG_WARNING, "%s", buf); + closelog(); + #else + #warning "Can't find usable syslog, disabled!" diff --git a/security/fakebo/files/patch-ab b/security/fakebo/files/patch-ab new file mode 100644 index 0000000..12c64f4 --- /dev/null +++ b/security/fakebo/files/patch-ab @@ -0,0 +1,13 @@ +--- fakebo.c.orig Thu Jun 6 18:13:21 2002 ++++ fakebo.c Thu Jun 6 18:13:31 2002 +@@ -457,8 +457,8 @@ + { + static char msg[] = "Warning: SIGHUP received, but config re-read not yet implemented!\n"; + +- logprintf(TRUE, msg); +- syslogprintf(msg); ++ logprintf(TRUE, "%s", msg); ++ syslogprintf("%s", msg); + } + + #endif |
