1
0
mirror of https://github.com/osmarks/ngircd.git synced 2024-12-04 22:19:57 +00:00

Fixed a bug that could case a root exploit when the daemon is compiled

to do IDENT lookups and is logging to syslog. Bug discovered by CoKi,
<coki@nosystem.com.ar>, thanks a lot! [from HEAD.]
(http://www.nosystem.com.ar/advisories/advisory-11.txt)
This commit is contained in:
Alexander Barton 2005-02-03 09:27:09 +00:00
parent 81d21d4592
commit 3563147514
2 changed files with 10 additions and 3 deletions

View File

@ -10,6 +10,13 @@
-- ChangeLog --
ngIRCd 0.8.x
- Fixed a bug that could case a root exploit when the daemon is compiled
to do IDENT lookups and is logging to syslog. Bug discovered by CoKi,
<coki@nosystem.com.ar>, thanks a lot!
(http://www.nosystem.com.ar/advisories/advisory-11.txt)
ngIRCd 0.8.2 (2005-01-26)
- Added doc/SSL.txt to distribution.
@ -554,4 +561,4 @@ ngIRCd 0.0.1, 31.12.2001
--
$Id: ChangeLog,v 1.233.2.18 2005/02/03 09:20:58 alex Exp $
$Id: ChangeLog,v 1.233.2.19 2005/02/03 09:27:09 alex Exp $

View File

@ -14,7 +14,7 @@
#include "portab.h"
static char UNUSED id[] = "$Id: log.c,v 1.44.2.3 2004/06/26 09:06:27 alex Exp $";
static char UNUSED id[] = "$Id: log.c,v 1.44.2.4 2005/02/03 09:27:09 alex Exp $";
#include "imp.h"
#include <assert.h>
@ -269,7 +269,7 @@ va_dcl
fflush( stdout );
}
#ifdef SYSLOG
else syslog( Level, msg );
else syslog( Level, "%s", msg );
#endif
} /* Log_Resolver */