Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 13 May 2002 14:10:29 -0600
From:      Brett Glass <brett@lariat.org>
To:        "Carroll, D. (Danny)" <Danny.Carroll@mail.ing.nl>, <security@FreeBSD.ORG>
Subject:   RE: DHCPD bug
Message-ID:  <4.3.2.7.2.20020513140848.038cac50@nospam.lariat.org>
In-Reply-To: <6C506EA550443D44A061432F1E92EA4C012DBA@ing.com>

next in thread | previous in thread | raw e-mail | index | archive | help
At 01:18 AM 5/13/2002, Carroll, D. (Danny) wrote:
  
>As a little aside, whilst reading the CERT advisory I noticed that
>NetBSD is not vulernable because: "NetBSD fixed this during a format
>string sweep performed on 11-Oct-2000. No released version of NetBSD is
>vulnerable to this issue."

I wonder if they notified ISC? It could be that their notice was missed
or ignored, or that because they've forked their own version they didn't 
know whether the bugs were still present in ISC's original code.

--Brett


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4.3.2.7.2.20020513140848.038cac50>