Bug 40618 - news/newsx: security patch for newsx version 1.4
Summary: news/newsx: security patch for newsx version 1.4
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: Normal Affects Only Me
Assignee: freebsd-ports (Nobody)
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2002-07-15 21:30 UTC by Thierry Thomas
Modified: 2002-08-05 00:26 UTC (History)
1 user (show)

See Also:

Attachments
file.diff (3.54 KB, patch)
2002-07-15 21:30 UTC, Thierry Thomas 		no flags Details | Diff
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Thierry Thomas 2002-07-15 21:30:02 UTC 
	Message from the author:
The attached patch fixes a security vulnerability with newsx version 1.4.
It also applies to earlier newsx versions.

The vulnerability is primarily local - it is not obvious that it may also
apply for remote exploits - but on the other hand this cannot be totally
ruled out either.

Thanks to zillion@snosoft.com for pointing this out.

Egil Kvaleberg <egil@beta.kvaleberg.no>

Fix: Please apply the attached patch:

How-To-Repeat: 	N./A.
Comment 1 Pete Fritchman freebsd_committer freebsd_triage 2002-08-05 00:26:19 UTC 
State Changed
From-To: open->closed

Committed, thanks!