Re: potential resolver vulnerability?

[Jeff Bachtel <jeff@cepheid.org>]

FreeBSD and OpenBSD fixed their resolvers within minutes of each
other. If I remember my CVS log correctly, its already been ported
back to OPENBSD_3_1 and 3_0.

jeff

On Wed, Jun 26, 2002 at 02:35:04PM -0700, John Miller wrote:
> On the FreeBSD security mailing list they have released an advisory against a buffer overflow in resolver.
> 
> http://docs.freebsd.org/cgi/getmsg.cgi?fetch=927832+0+current/freebsd-security
> 
> After looking over their patch:
> ftp://ftp.freebsd.org/pub/FreeBSD/CERT/patches/SA-02:28/resolv.patch 
> 
> I started playing around with porting it to OpenBSD, here's what I have so far:
> 
> resolver.patch