US-CERT
Vulnerability
Notes
Database

Search Vulnerability Notes

Vulnerability Notes Help Information
 

 View Notes By
Name

ID Number

CVE Name

Date Public

Date Published

Date Updated

Severity Metric

 Other Documents
Technical Alerts

Technical Bulletins

Alerts

Security Tips

ISC Information for VU#854315

Date Notified
Date Modified01/13/2003 12:31:40 PM
Status SummaryVulnerable

Vendor Statement

      A patch is included below, and we have a patched version of 3.0 available (3.0pl1) and a new release candidate for the next bug-fix release (3.0.1RC9).  Both of these new releases are not vulnerable.

      --- common/print.c      Tue Apr  9 13:41:17 2002
      +++ common/print.c.patched      Tue Apr  9 13:41:56 2002
      @@ -1366,8 +1366,8 @@
                     *s++ = '.';
             *s++ = 0;
             if (errorp)
      -               log_error (obuf);
      +               log_error ("%s",obuf);
             else
      -               log_info (obuf);
      +               log_info ("%s",obuf);
      }
      #endif /* NSUPDATE */

US-CERT Addendum

Upgrade to a newer version or apply the following patch.

--- common/print.c Tue Apr 9 13:41:17 2002
+++ common/print.c.patched Tue Apr 9 13:41:56 2002
@@ -1366,8 +1366,8 @@
*s++ = '.';
*s++ = 0;
if (errorp)
- log_error (obuf);
+ log_error ("%s",obuf);
else
- log_info (obuf);
+ log_info ("%s",obuf);
}
#endif /* NSUPDATE */

If you have feedback, comments, or additional information about this vulnerability, please send us email.
 

Produced 2008 by US-CERT, a government organization
Disclaimers and copyright information