Re: Bahamut IRCd <= 1.4.35 and several derived daemons

From: Barnaba Marcello (l.barnabaat_private)
Date: Thu Jun 26 2003 - 13:50:15 PDT

  • Next message: Pal Juvancz: "Symantec NAV 7.6 CE Major Fault"

    Joel Eriksson ..
    
    >  The following daemon had already fixed the bug:
    >
    >    cs-ircd-0.1.1beta
    
    It should be noted that the "bugfix" into the "cs-ircd" release was
    actually inherited from the bahamut-inet6[1] codebase, from which the
    cs-ircd team started its own daemon :).
    
    This little snippet of code demonstrates what I say:
    
    #ifdef USE_SYSLOG
    
    if (level == DEBUG_ERROR)
    syslog(LOG_ERR, "%s", debugbuf); /*AZZURRA format string exploit
    patch.*/
    
    #endif
    
    The key word is "Azzurra".
    
    Best regards.
    
    [1] http://bahamut-inet6.sourceforge.net/
    -- 
    pub 1024D/F04476A2 :: 6807 EEA5 7F97 AC9A D8EF  AE73 64CD 71A2 F044 76A2
    http://suxserv.sourceforge.net/vjt.asc
    Free advertisement: http://www.freebsd.org/
    



    This archive was generated by hypermail 2b30 : Thu Jun 26 2003 - 14:04:44 PDT