mail archive Security issues members-only posting
freebsd-security.freebsd.org
(List home) (Recent threads) (174 other FreeBSD lists)
Subscription Options
- RSS or Atom: Read-only subscription using a browser or aggregator. This is the recommended way if you don't need to send messages to the list. You can learn more about feed syndication and clients here.
- Conventional: All messages are delivered to your mail address, and you can reply. To subscribe, send an email to the list's subscribe address with "subscribe" in the subject line, or visit the list's homepage here.
- Low traffic list: less than 3 messages per day
- This list contains about 36,176 messages, beginning Feb 1995
- 0 messages added yesterday
Security issues members-only posting
September 1995
Eric Allman's syslog.c fixes (2 Replies)
(Peter Wemm) — 80993888801 Sep 1995*
Eric Allman is running a new syslog.c through the mill at the moment. It'll be the one published in the RSN CERT advisory I presume. It's thou...
Mr D Whitehead (Ext 2703) — 80995624901 Sep 1995
Hi, FreeBSD-2.0.5R does not seem to be able to export a filesystem when the mount request was made by Sun's PCNFS using its default user of ...
Re: Eric Allman's syslog.c fixes (2 Replies)
Bruce Evans — 80998515601 Sep 1995*
The one posted here didn't check the format conversion. pst's version was more complete. Someone suggested using %.*s instead of snprintf. Tha...
NatureBoy — 81016935503 Sep 1995
Just wondering what the current status of Stel is. Is it ported? Availible? Released? Thanks for any responses, Joseph D. Orthoefer...
syslog patches? (2 Replies)
(Guido van Rooij) — 81020932704 Sep 1995*
After the intial posting of Paul Traina's modified syslog I haven't seen a new attempt yet. I did see a NetBSD solution to the problem though....
Paul Traina — 81041698406 Sep 1995
I finally got off my butt and put this together. It's more anal than Eric's proposed fix..actually, it's insanely anal, but then again, sy...
Paul Traina — 81041701506 Sep 1995
--- /usr/src/lib/libc/gen/syslog.c Tue Aug 29 08:04:17 1995 +++ syslog.c Wed Sep 6 12:44:59 1995 @@ -88,6 +88,24 @@ va_end(ap); }+/* + * Some rather a...
Bruce Evans — 81043674307 Sep 1995
itThis is wrong if size_t is larger than ptrdiff_t. Then the result is unsigned and large if `current' is after the end of the buffer, as it may b...
Do we *really* need logger(1)? (5 Replies)
Brian Tao — 81045000307 Sep 1995*
I was looking through my lp wrapper shell script (basically redirects output to an SGI elsewhere on the LAN, while passing options and around). I use ...
Bruce Evans — 81048172607 Sep 1995
Correct so far. If sizeof(buffer) is (unsigned)2048, and the pointer difference is (int)2049, then the result is (unsigned)(-1) = UINT_MAX. Thus SPACE...
Re: Do we *really* need logger(1)? (2 Replies)
Peter May — 81048450207 Sep 1995*
Hmmmm ... the best way of doing this is probably a rotary log file rather than a flat log file. For example, the error log on an AIX system uses at mo...
(Peter Wemm) — 81050531307 Sep 1995
Are we not all looking at it from the wrong way? It seems that an incredible effort is being spent to make the message fit in a small, fixed size buff...
Tony Jones — 81051518807 Sep 1995
I was surprised to see FreeBSD didn't have the 'syslog.dated' feature which rolls over the log files daily (or at boot time). It's a n...
William McVey - wam — 81057024608 Sep 1995
This is just an FYI, Diffie Helman key exchange is patented by PKP. If we are going to revamp syslog to use it, then for our sakes, we should do the l...
Bruce Evans — 81122830116 Sep 1995
This problem has probably been reduced by the "zombie" tty state in 2.2-current and recently in 2.1-stable.Under 2.2-current, I see the foll...
forwarded message from Grant Haidinyak (1 Reply)
Nate Williams — 81123841116 Sep 1995*
--- start of forwarded message (RFC 934 encapsulation) --- [ Quick background. Grant has been experiencing a bug whereby folks are re-connected to log...
Bruce Evans — 81124742016 Sep 1995
Try this fix. Closing the pty master cleared the tty's session pointer, but this pointer must be kept around until the controlling terminal (the p...
Mr D Whitehead (Ext 2703) — 81127663516 Sep 1995
This bug (or at least one very much like it) has been around since at least BSD4.3 . We first saw it here on a VAX750 running BSD4.3, and still see it...
Clary Harridge — 81156286020 Sep 1995
Hi can someone please tell me -- Is there a version of crack somewhere which knows how to handle the current FreeBSD encryption algorithms. I would li...
Re: crack for freebsd (2 Replies)
Mark Murray — 81161537820 Sep 1995*
Any version of crack will work, as long as you link against FreeBSD's -lcrypt. This libriary is a link to the current encryption scheme, so upgrad...
John Capo — 81173002922 Sep 1995
I have put the patches needed to compile this package into a -current kernel in freefall.cdrom.com/incoming/ip_fil2.8a-patches. My mods do affect the ...
Yen-Wei Liu — 81184784323 Sep 1995*
Hi, The following message comes from linux-security mailing list. Actually this message just reminds me of two issues : 1) That mailing list has a fai...
Андрей Чернов (aka Andrey A. Chernov, Black Mage) — 81224287927 Sep 1995
I can't enable encryption in telnet (secure), telnetd secure too. All settings appearse processed, but input/output always said as clear-text inst...
Re: Troubles with telnet encryption enabling. (4 Replies)
Mark Murray — 81231010928 Sep 1995*
I only get encrypted transmissions on Kerberos-authenticated connections. I'll look later to see if that is the way it is supposed to be. M...
are we affected? (1 Reply)
Paul Traina — 81231510728 Sep 1995*
--- Forwarded Message Date: Thu, 28 Sep 1995 14:41:55 -0400 From: Linda Hutz Pesante To: Subject: final version of vendor bulletin DISTRIBUTION RESTRI...
Re: are we affected? (2 Replies)
Bruce Evans — 81234062629 Sep 1995*
The damage is limited mainly by lsof not being a port. I have lsof_3.31, which is quite recent (June 17). This version doesn't quite compile under...
Andries J. Algera — 81238432029 Sep 1995
I recently installed Freebsd and would like to have it using NIS for authentication. We already have a NIS+ server in NIS mode running on a SPARC w/ S...