From f722942f0e2a6fd686443fa81e5ecbf1b2039a21 Mon Sep 17 00:00:00 2001 From: =?utf8?q?Jan=20R=C4=99korajski?= Date: Fri, 21 Apr 2006 23:40:25 +0000 Subject: [PATCH] - orphaned, outdated Changed files: apache-mod_ntlm-security.patch -> 1.2 --- apache-mod_ntlm-security.patch | 31 ------------------------------- 1 file changed, 31 deletions(-) delete mode 100644 apache-mod_ntlm-security.patch diff --git a/apache-mod_ntlm-security.patch b/apache-mod_ntlm-security.patch deleted file mode 100644 index 18f81cd..0000000 --- a/apache-mod_ntlm-security.patch +++ /dev/null @@ -1,31 +0,0 @@ -Fixes vulnerabilities in log() and flog() functions: -heap overflows (BugTraqID 7388) -format strings (BugTraqID 7393) -insecure file access in /tmp -diff -Nur mod_ntlm-0.4.orig/mod_ntlm.c mod_ntlm-0.4/mod_ntlm.c ---- mod_ntlm-0.4.orig/mod_ntlm.c 2003-02-21 02:55:13.000000000 +0100 -+++ mod_ntlm-0.4/mod_ntlm.c 2003-10-25 23:03:34.470322328 +0200 -@@ -48,9 +48,9 @@ - if ((s = (char *) malloc(2048)) == NULL) - return; - va_start(ap, format); -- vsprintf(s, format, ap); -+ vsnprintf(s, 2048, format, ap); - va_end(ap); -- ap_log_rerror(APLOG_MARK, APLOG_NOERRNO | APLOG_NOTICE, r, s); -+ ap_log_rerror(APLOG_MARK, APLOG_NOERRNO | APLOG_NOTICE, r, "%s", s); - free(s); - } - static void -@@ -63,9 +63,9 @@ - if ((s = (char *) malloc(2048)) == NULL) - return; - va_start(ap, format); -- vsprintf(s, format, ap); -+ vsnprintf(s, 2048, format, ap); - va_end(ap); -- if ((f = fopen("/tmp/mod_ntlm.log", "a")) != NULL) { -+ if ((f = fopen("/var/log/mod_ntlm.log", "a")) != NULL) { - fputs(s, f); - fputs("\n", f); - fclose(f); -- 2.44.0