Bugzilla – Attachment 19856 Details for
Bug 55791
VUL-0: CVE-2004-0488: buffer overflow in mod_ssl
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Requests
|
IDP Log In
|
Forgot Password
same patch for apache2
httpd-2.0.49-ssl_uuencode-buffersize.dif (text/x-diff), 1.02 KB, created by
Juergen Weigert
on 2004-05-18 23:20:11 UTC
(
hide
)
Description:
same patch for apache2
Filename:
MIME Type:
Creator:
Juergen Weigert
Created:
2004-05-18 23:20:11 UTC
Size:
1.02 KB
patch
obsolete
>--- httpd-2.0.49/modules/ssl/ssl_engine_kernel.c.orig 2004-02-09 21:53:20.000000000 +0100 >+++ httpd-2.0.49/modules/ssl/ssl_engine_kernel.c 2004-05-18 17:03:09.000000000 +0200 >@@ -793,7 +793,7 @@ > SSLConnRec *sslconn = myConnConfig(r->connection); > SSLSrvConfigRec *sc = mySrvConfig(r->server); > SSLDirConfigRec *dc = myDirConfig(r); >- char buf1[MAX_STRING_LEN], buf2[MAX_STRING_LEN]; >+ char buf1[MAX_STRING_LEN], buf2[2*MAX_STRING_LEN]; > char *clientdn; > const char *auth_line, *username, *password; > >--- httpd-2.0.49/modules/ssl/ssl_util.c.orig 2004-02-09 21:53:20.000000000 +0100 >+++ httpd-2.0.49/modules/ssl/ssl_util.c 2004-05-18 16:49:41.000000000 +0200 >@@ -76,6 +76,11 @@ > strlen(szFrom), bPad); > } > >+/* >+ * nLength is strlen(szFrom), >+ * sizeof(szTo) must be at least 4*nLength/3 >+ * 18.5.2004, jw@suse.de >+ */ > void ssl_util_uuencode_binary(unsigned char *szTo, > const unsigned char *szFrom, > int nLength, BOOL bPad)
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
Actions:
View
Attachments on
bug 55791
:
19854
| 19856 |
19913