[src/netbsd-1-5]: src Yawn:

[jhawk <jhawk%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/c104d8b5637f
branches:  netbsd-1-5
changeset: 491121:c104d8b5637f
user:      jhawk <jhawk%NetBSD.org@localhost>
date:      Thu Apr 05 09:48:43 2001 +0000

description:
Yawn:
 o ntp_control buffer overflow

diffstat:

 CHANGES-1.5.1 |  11 ++++++++++-
 1 files changed, 10 insertions(+), 1 deletions(-)

diffs (22 lines):

diff -r 9181c214979e -r c104d8b5637f CHANGES-1.5.1
--- a/CHANGES-1.5.1     Thu Apr 05 09:45:27 2001 +0000
+++ b/CHANGES-1.5.1     Thu Apr 05 09:48:43 2001 +0000
@@ -1,4 +1,4 @@
-#      $NetBSD: CHANGES-1.5.1,v 1.1.2.43 2001/04/04 21:00:09 he Exp $
+#      $NetBSD: CHANGES-1.5.1,v 1.1.2.44 2001/04/05 09:48:43 jhawk Exp $
 
 A complete list of changes from NetBSD 1.5 to NetBSD 1.5.1:
 
@@ -2475,3 +2475,12 @@
 usr.sbin/dhcp/server/stables.c                 1.1.1.6
 
   Update DHCP software to ISC version 3, Beta 2, Patchlevel 23.
+
+dist/ntp/ntpd/ntp_control.c                    1.2
+
+  Fix a DoS attack (and possibly, but not confirmed, a root exploit) in
+  ntpd.
+  Fix from Poul-Henning Kamp and Dima Ruban from the FreeBSD tree,
+  with changes from Jason Thorpe to not overrun the end of the static
+  buffer and with syslog()ing the bad packets disabled so as not to
+  DoS syslog.