Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 24 Sep 2003 17:48:20 -0400 (EDT)
From:      Michael Scheidell <scheidell@secnap.net>
To:        security-advisories@freebsd.org
Cc:        freebsd-stable@freebsd.org
Subject:    Re: [Full-Disclosure] FreeBSD Security Advisory FreeBSD-SA-03:14.arp
Message-ID:  <20030924214820.A66FD38108@mail.secnap.net>
In-Reply-To: <200309241429.h8OETrJg097913@freefall.freebsd.org>

next in thread | previous in thread | raw e-mail | index | archive | help
> 
> Do one of the following:
> 
> 1) Upgrade your vulnerable system to 4-STABLE; or to the RELENG_5_1,
> RELENG_5_0, RELENG_4_8, or RELENG_4_7 security branch dated after the
> correction date.

just did, and now my multihomed FBSD 4.8 system has no route

net route add default (my router) does 0. zip, noda, nothing

no errors, and netstat -rn doesn't show ANY default route.

copying over an 'arp-deficient' kernel fixes it.

> 2) To patch your present system:
> 
> The following patch has been verified to apply to FreeBSD 5-CURRENT,
> 4.9-PRERELEASE, and 4.8 systems.

don't.. not until they fix multihomed systems.

-- 
Michael Scheidell, CEO
SECNAP Network Security, LLC 
Sales: 866-SECNAPNET / (1-866-732-6276)
Main: 561-368-9561 / www.secnap.net
Looking for a career in Internet security?
http://www.secnap.net/employment/



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030924214820.A66FD38108>