Bug 18479 – Format string bug in RH5.2's talkd

Bugzilla will be upgraded to version 5.0 on a still to be determined date in the near future. The original upgrade date has been delayed.

Bug 18479 - Format string bug in RH5.2's talkd

Summary:	Format string bug in RH5.2's talkd

Status:	CLOSED WONTFIX

Aliases:	None

Product:	Red Hat Linux
Classification:	Retired
Component:	talk (Show other bugs)
Sub Component:
Version:	5.2
Hardware:	i386 Linux

Priority	medium Severity medium
Target Milestone:	---
Target Release:	---
Assigned To:	Phil Knirsch
QA Contact:
Docs Contact:

URL:
Whiteboard:
Keywords:	Security

Depends On:
Blocks:
	Show dependency tree / graph

Reported:	2000-10-05 19:09 EDT by Chris Evans
Modified:	2015-03-04 20:08 EST (History)
CC List:	1 user (show)

See Also:
Fixed In Version:
Doc Type:	Bug Fix
Doc Text:
Story Points:	---
Clone Of:
Environment:
Last Closed:	2001-06-22 11:37:18 EDT
Type:	---
Regression:	---
Mount Type:	---
Documentation:	---
CRM:
Verified Versions:
Category:	---
oVirt Team:	---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---

Attachments	(Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

Groups: None (edit)

Description Chris Evans 2000-10-05 19:09:52 EDT

NOTE!! Does _not_ affect RH6.0 or newer because of a netkit source change
Just a bug FYI, in case you're still supporting 5.2

See bogus use of fprintf() in announce.c: print_mesg(). "%s" is missing.
May be remotely exploitable.
If I had a RH5.2 machine I'd reseach this but.... :-)

See Bugtraq post here for someone who spotted this change in the OpenBSD
tree:
http://www.securityfocus.com/archive/1/137482

Comment 1 Phil Knirsch 2001-08-23 05:58:21 EDT

Thanks for reporting, but 5.2 is now out of the supported systems.

Read ya, Phil

PS: I just took over our internal ownership of this package, so i can't tell you
why there hasn't been done a fix earlier. :)

Note You need to log in before you can comment on or make changes to this bug.