This is the mail archive of the libc-hacker@sources.redhat.com mailing list for the glibc project.

Note that libc-hacker is a closed list. You may look at the archives of this list, but subscription and posting are not open.

Index Nav:	[Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav:	[Date Prev] [Date Next]	[Thread Prev] [Thread Next]

Re: nscd syslog fix

To: Thorsten Kukuk <kukuk at suse dot de>
Subject: Re: nscd syslog fix
From: Ulrich Drepper <drepper at redhat dot com>
Date: 26 Sep 2000 02:35:25 -0700
Cc: libc-hacker at sourceware dot cygnus dot com
References: <20000926101609.A11950@suse.de>
Reply-To: drepper at cygnus dot com (Ulrich Drepper)

Thorsten Kukuk <kukuk@suse.de> writes:

> nscd calls syslog without format string in the logging function.
> You cannot use it for an exploit, but a normal user can crash nscd
> if it runs with logging enabled. Here is the fix:

Thanks, I'm adding it now.

-- 
---------------.                          ,-.   1325 Chesapeake Terrace
Ulrich Drepper  \    ,-------------------'   \  Sunnyvale, CA 94089 USA
Red Hat          `--' drepper at redhat.com   `------------------------

References:
- nscd syslog fix
  - From: Thorsten Kukuk

Index Nav:	[Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav:	[Date Prev] [Date Next]	[Thread Prev] [Thread Next]