oss-security - CVE Request: quota: incorrect use of tcp

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <5007C6F4.4070602@redhat.com>
Date: Thu, 19 Jul 2012 14:06:04 +0530
From: Huzaifa Sidhpurwala <huzaifas@...hat.com>
To: oss-security@...ts.openwall.com
CC: Kurt Seifried <kseifried@...hat.com>
Subject: CVE Request: quota: incorrect use of tcp_wrappers

Hi All,

rquotad seems to re-use good_client implementation from portmap.
The way good_client called tcp_wrappers via hosts_ctl was not correct,
possibly causing hosts access rules defined in hosts.{allow,deny} not to
be honored.

Reference:
https://bugzilla.redhat.com/show_bug.cgi?id=566717

Can a CVE id be please allocated to this issue? (Possibly 2010 i think)

Thanks!.

-- 
Huzaifa Sidhpurwala / Red Hat Security Response Team

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.