Re: FreeBSD Security Advisory FreeBSD-SA-08:02.libc

<<On Mon, 14 Jan 2008 23:28:46 -0500, Mike Tancsa <mike@sentex.net> said:

> For the "usual suspects" of applications running, (e.g. sendmail, 
> apache, BIND etc) would it be possible to pass crafted packets 
> through to this function remotely via those apps ?  ie how easy is this to do ?

inet_network() is a very infrequently-used function (perhaps because
it's nearly useless except for backward-compatibility).  It's
referenced by getent(1), isdnd(8), timed(8), and mountd(8) -- the
latter three I assume for configuration-file parsing -- and can also
be called from getnetbyname().  libbind also includes an
implementation of it, but bind itself doen't reference it.  route(8)
uses it to parse network numbers given on the command line.

-GAWollman
_______________________________________________
freebsd-security@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"