Date: Thu, 13 Nov 1997 14:57:58 -0800 (PST) From: Julian Elischer <julian@FreeBSD.ORG> To: cvs-committers@FreeBSD.ORG, cvs-all@FreeBSD.ORG, cvs-sys@FreeBSD.ORG Subject: cvs commit: src/sys/netinet ip_input.c Message-ID: <199711132257.OAA09385@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
julian 1997/11/13 14:57:58 PST
Modified files:
sys/netinet ip_input.c
Log:
Submitted by: Archie cobbs (IPDIVERT author)
close small security hole where an atacker could sendpackets with
IPDIVERT protocol, and select how it would be diverted thus bypassing
the ipfirewall. Discovered by inspection rather than attack.
(you'd have to know how the firewall was configured (EXACTLY) to
make use of this but..)
Revision Changes Path
1.72 +7 -1 src/sys/netinet/ip_input.c
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199711132257.OAA09385>