- format string vulnerability, CAN-2004-0980

Changed files:
    ez-ipupdate-CAN-2004-0980.patch -> 1.1

diff --git a/ez-ipupdate-CAN-2004-0980.patch b/ez-ipupdate-CAN-2004-0980.patch
new file mode 100644 (file)
index 0000000..83187d1
--- /dev/null
+++ b/ez-ipupdate-CAN-2004-0980.patch
@@ -0,0 +1,11 @@
+--- ez-ipupdate.c.old  2002-03-12 00:31:47.000000000 +0100
++++ ez-ipupdate.c      2004-11-10 15:28:23.000000000 +0100
+@@ -798,7 +798,7 @@ void show_message(char *fmt, ...)
+     sprintf(buf, "message incomplete because your OS sucks: %s\n", fmt);
+ #endif
+ 
+-    syslog(LOG_NOTICE, buf);
++    syslog(LOG_NOTICE, "%s", buf);
+   }
+   else
+   {