[BACK]Return to security.html CVS log [TXT][DIR] Up to [local] / www

Diff for /www/security.html between version 1.303 and 1.304

version 1.303, 2004/12/14 14:06:14 version 1.304, 2005/01/12 15:08:02
Line 229 
Line 229 
   
 <p>  <p>
 <ul>  <ul>
   <li><a href="errata.html#httpd">Jan 12, 2005:
           httpd(8)'s mod_include module fails to properly validate
           the length of user supplied tag strings prior to copying
           them to a local buffer, causing a buffer overflow.
 <li><a href="errata.html#pfkey">Dec 14, 2004:  <li><a href="errata.html#pfkey">Dec 14, 2004:
         On systems running isakmpd(8) it is possible for a local          On systems running isakmpd(8) it is possible for a local
         user to cause kernel memory corruption and system panic by          user to cause kernel memory corruption and system panic by
Line 246 
Line 250 
   
 <p>  <p>
 <ul>  <ul>
   <li><a href="errata35.html#httpd3">Jan 12, 2005:
           httpd(8)'s mod_include module fails to properly validate
           the length of user supplied tag strings prior to copying
           them to a local buffer, causing a buffer overflow.
 <li><a href="errata35.html#pfkey">Dec 14, 2004:  <li><a href="errata35.html#pfkey">Dec 14, 2004:
         On systems running isakmpd(8) it is possible for a local          On systems running isakmpd(8) it is possible for a local
         user to cause kernel memory corruption and system panic by          user to cause kernel memory corruption and system panic by
Legend:
Removed from v.1.303  
changed lines
  Added in v.1.304