Bug 83263 – Segfaults with some SSL hosts

Bug 83263 - Segfaults with some SSL hosts

Summary:	Segfaults with some SSL hosts

Status:	CLOSED RAWHIDE

Aliases:	None

Product:	Red Hat Raw Hide
Classification:	Retired
Component:	w3m (Show other bugs)
Sub Component:
Version:	1.0
Hardware:	All Linux

Priority	medium Severity high
Target Milestone:	---
Target Release:	---
Assigned To:	Akira TAGOH
QA Contact:
Docs Contact:

URL:
Whiteboard:
Keywords:

Depends On:
Blocks:
	Show dependency tree / graph

Reported:	2003-01-31 21:32 EST by Enrico Scholz
Modified:	2008-05-01 11:38 EDT (History)
CC List:	0 users

See Also:
Fixed In Version:
Doc Type:	Bug Fix
Doc Text:
Story Points:	---
Clone Of:
Environment:
Last Closed:	2003-02-03 04:13:54 EST
Type:	---
Regression:	---
Mount Type:	---
Documentation:	---
CRM:
Verified Versions:
Category:	---
oVirt Team:	---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---

Attachments	(Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

Groups: None (edit)

Description Enrico Scholz 2003-01-31 21:32:09 EST

Description of problem:

| $ w3m https://www.tu-chemnitz.de
| Segmentation fault

Other hosts are working fine (e.g. https://www.redhat.com)

I have not tested if/how this can be exploited, but segfaults which are caused
by remote server-certificates are smelling like a security leak.


Version-Release number of selected component (if applicable):

w3m-0.3.2.2-3
openssl-0.9.7-4


How reproducible:

100%

Comment 1 Akira TAGOH 2003-02-03 03:00:13 EST

I think it's not vulnerable.

Comment 2 Akira TAGOH 2003-02-03 04:13:54 EST

fixed in 0.3.2.2-5.

Note You need to log in before you can comment on or make changes to this bug.