Bug 2579

Summary:

potential security hole in rcmd.c

Product:

Base System

Reporter:

Julian Assange <proff>

Component:

bin

Assignee:

Warner Losh <imp>

Status:

Closed FIXED

Severity:

Affects Only Me

Priority:

Normal

Version:

3.0-CURRENT

Hardware:

Any

OS:

Any

Attachments:

Description	Flags
file.diff	none

Description Julian Assange 1997-01-25 15:00:01 UTC

	rcmd trusts h_length as returned from resolver

Comment 1 mpp freebsd_committer

1997-01-26 07:08:54 UTC

Responsible Changed
From-To: gnats-admin->freebsd-bugs

Misfiled PR.

Comment 2 Bill Fenner freebsd_committer

1997-01-27 18:31:52 UTC

Responsible Changed
From-To: freebsd-bugs->freebsd-bugs

It didn't.

Comment 3 Warner Losh freebsd_committer

1997-02-09 06:39:24 UTC

Responsible Changed
From-To: freebsd-bugs->imp

Cause I'm going to fix this bug.

Comment 4 Warner Losh freebsd_committer

1997-02-09 06:58:23 UTC

State Changed
From-To: open->closed

Fixed in rev 1.11 of rcmd.c.  Backported to 2.1.x and 2.2.