diff options
| author | Chris Piazza <cpiazza@FreeBSD.org> | 1999-08-30 19:14:07 +0000 |
|---|---|---|
| committer | Chris Piazza <cpiazza@FreeBSD.org> | 1999-08-30 19:14:07 +0000 |
| commit | 58ca2806f3504fbc6fb341a28d0adfa9503f72a9 (patch) | |
| tree | d22f266e7f50c04b645bd84bb80673d1a37ad11d /ftp/wu-ftpd+ipv6/Makefile | |
| parent | GNU Pth 1.1.3 -> 1.1.4 (diff) | |
Add a PATCH_FILE to close a security hole in wu-ftpd.
Quoted from wu-ftpd group's accouncement:
Due to insufficient bounds checking on directory name lengths which can
be supplied by users, it is possible to overwrite the static memory
space of the wu-ftpd daemon while it is executing under certain
configurations. By having the ability to create directories and
supplying carefully designed directory names to the wu-ftpd, users may
gain privileged access.
PR: 13475
Submitted by: jack@germanium.xtalwind.net
Notes
Notes:
svn path=/head/; revision=21133
Diffstat (limited to 'ftp/wu-ftpd+ipv6/Makefile')
| -rw-r--r-- | ftp/wu-ftpd+ipv6/Makefile | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/ftp/wu-ftpd+ipv6/Makefile b/ftp/wu-ftpd+ipv6/Makefile index 20940b692a64..7ca3f872b7d3 100644 --- a/ftp/wu-ftpd+ipv6/Makefile +++ b/ftp/wu-ftpd+ipv6/Makefile @@ -12,6 +12,9 @@ DISTNAME= wu-ftpd-2.5.0 CATEGORIES= ftp MASTER_SITES= ftp://ftp.vr.net/pub/wu-ftpd/wu-ftpd/ +PATCH_SITES= ftp://ftp.wu-ftpd.org/pub/wu-ftpd/quickfixes/apply_to_2.5.0/ +PATCHFILES= mapped.path.overrun.patch + MAINTAINER= ache@FreeBSD.org Y2K= http://www.cetis.hvu.nl/~koos/wu-ftpd-faq.html#QA35 |