aboutsummaryrefslogtreecommitdiffstats
path: root/net/ntp-devel/files
diff options
context:
space:
mode:
authorsf <sf@FreeBSD.org>2001-04-06 03:59:25 +0800
committersf <sf@FreeBSD.org>2001-04-06 03:59:25 +0800
commita4c2698e18bebcec085ab07c965cd91686e4835e (patch)
treec5cc890aefcdea9a71f3d311c0cc14748eb235b8 /net/ntp-devel/files
parentd49e027abecb7b4e0f6ec94cc74480077e280518 (diff)
downloadfreebsd-ports-graphics-a4c2698e18bebcec085ab07c965cd91686e4835e.tar.gz
freebsd-ports-graphics-a4c2698e18bebcec085ab07c965cd91686e4835e.tar.zst
freebsd-ports-graphics-a4c2698e18bebcec085ab07c965cd91686e4835e.zip
o Fix a potential ROOT-exploit in NTPD.
(grabbed from src/contrib/ntp/ntpd) o new maintainer. PR: 26369 Submitted by: Cy Schubert <Cy.Schubert@uumail.gov.bc.ca>
Diffstat (limited to 'net/ntp-devel/files')
-rw-r--r--net/ntp-devel/files/patch-ntp_control.c24
1 files changed, 24 insertions, 0 deletions
diff --git a/net/ntp-devel/files/patch-ntp_control.c b/net/ntp-devel/files/patch-ntp_control.c
new file mode 100644
index 00000000000..a0faa4906d0
--- /dev/null
+++ b/net/ntp-devel/files/patch-ntp_control.c
@@ -0,0 +1,24 @@
+--- ntpd/ntp_control.c.orig Sat Jul 15 23:46:05 2000
++++ ntpd/ntp_control.c Fri Apr 6 01:05:57 2001
+@@ -1821,9 +1821,19 @@
+ while (cp < reqend &&
+ isspace((int)*cp))
+ cp++;
+- while (cp < reqend && *cp !=
+- ',')
++ while (cp < reqend && *cp != ',') {
+ *tp++ = *cp++;
++ if (tp > buf + sizeof(buf)) {
++ msyslog(LOG_WARNING, "Attempted \"ntpdx\" exploit from IP %d.%d.%d.%d:%d (possibly spoofed)\n",
++ (ntohl(rmt_addr->sin_addr.s_addr) >> 24) & 0xff,
++ (ntohl(rmt_addr->sin_addr.s_addr) >> 16) & 0xff,
++ (ntohl(rmt_addr->sin_addr.s_addr) >> 8) & 0xff,
++ (ntohl(rmt_addr->sin_addr.s_addr) >> 0) & 0xff,
++ ntohs(rmt_addr->sin_port)
++);
++ return (0);
++ }
++ }
+ if (cp < reqend)
+ cp++;
+ *tp = '\0';