From 7bd7b1c944ca2b68cb29d0070acaf26ba618a8a7 Mon Sep 17 00:00:00 2001 From: Kris Kennaway Date: Wed, 1 Dec 1999 19:30:42 +0000 Subject: Mark BROKEN due to buffer overflow yielding root to members of wheel. There's also an overflow with ospf_monitor which may result in being able to corrupt routing traffic (which I've reported to the developers) According to the docs, gdc shouldn't be installed root:wheel and setuid, but put into its own gdmaint group. This still doesn't prevent people in that group from gaining root, though. Submitted by: Brock Tellier (gdc bug) --- net/gated/Makefile | 2 ++ 1 file changed, 2 insertions(+) (limited to 'net') diff --git a/net/gated/Makefile b/net/gated/Makefile index cb479f30ec1c..2dec6d37e7cc 100644 --- a/net/gated/Makefile +++ b/net/gated/Makefile @@ -13,6 +13,8 @@ MASTER_SITES= ftp://ftp.gated.merit.edu/net-research/gated/ MAINTAINER= peter@FreeBSD.org +BROKEN= Security hole (buffer overflow possibly yielding root) + ALL_TARGET= gated MAN8= gated.8 ripquery.8 ospf_monitor.8 gdc.8 -- cgit v1.2.3