[30541] in bugtraq
Re: Bahamut IRCd <= 1.4.35 and several derived daemons
daemon@ATHENA.MIT.EDU (Barnaba Marcello)
Thu Jun 26 17:18:29 2003
Date: Thu, 26 Jun 2003 22:50:15 +0200
From: Barnaba Marcello <l.barnaba@openssl.it>
To: bugtraq@securityfocus.com
Message-Id: <20030626225015.7146c687.l.barnaba@openssl.it>
In-Reply-To: <20030626193042.GA1451@mail.bitnux.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Joel Eriksson ..
> The following daemon had already fixed the bug:
>
> cs-ircd-0.1.1beta
It should be noted that the "bugfix" into the "cs-ircd" release was
actually inherited from the bahamut-inet6[1] codebase, from which the
cs-ircd team started its own daemon :).
This little snippet of code demonstrates what I say:
#ifdef USE_SYSLOG
if (level == DEBUG_ERROR)
syslog(LOG_ERR, "%s", debugbuf); /*AZZURRA format string exploit
patch.*/
#endif
The key word is "Azzurra".
Best regards.
[1] http://bahamut-inet6.sourceforge.net/
--
pub 1024D/F04476A2 :: 6807 EEA5 7F97 AC9A D8EF AE73 64CD 71A2 F044 76A2
http://suxserv.sourceforge.net/vjt.asc
Free advertisement: http://www.freebsd.org/
