Bug#747006: net-tools: Buffer overflow detected by libc in 'route' command

2014-05-11 Thread Martín Ferrari
tags 747006 patch thanks On 12/05/14 04:12, Martín Ferrari wrote: > The code is using strcpy, I will produce a patch for this, but I'd > strongly recommend you to use iproute instead. Patch added to svn, seems to fix the issue. -- Martín Ferrari (Tincho) signature.asc Description: OpenPGP di

Bug#747006: net-tools: Buffer overflow detected by libc in 'route' command

2014-05-11 Thread Martín Ferrari
On 04/05/14 20:00, Alan Fisher wrote: > In this example, when 'route' is run with the fourth argument > (0123456789abcdef) >= 16 characters, a buffer overrun occurs. > > # route add -6 default 0123456789abcdef It seems that all parameters are exposed to buffer overflows: $ ./route add -6 $(per

Bug#747006: net-tools: Buffer overflow detected by libc in 'route' command

2014-05-04 Thread Alan Fisher
Package: net-tools Version: 1.60-25 Severity: low Dear Maintainer, In this example, when 'route' is run with the fourth argument (0123456789abcdef) >= 16 characters, a buffer overrun occurs. # route add -6 default 0123456789abcdef glib reports detecting a buffer overflow. Here is the output: