Hosting Provided By

Re: seems to be a bug ?

From: Frédéric Raynal <frederic.raynal(at)security-labs.org>
Date: Wed May 14 2003 - 12:54:12 EDT

Ok, thanks to Xavier's indication sent privately, thebug is fixed and a patch is available.

Details can be found here :
http://www.security-labs.org/Libnet/icmp_unreach-3.txt

As a summary, we can say that the size of the payload was omited to compute the checksum.

As it is the 3rd bug with this function, only one patch is available (attached) for all of them.

A devel version, already patched is available here from here: http://www.security-labs.org/index.php3?page=607 It contains several patches.

Last but not least, the 3 bugs in libnet_icmp_unreach() are also present in other icmp error messages ... but they will be fixed when we will be sure we did not forget another stupid bug, which may be really soon ;)

--
Frederic RAYNAL, Ph.D.
http://www.security-labs.org/
Chief Editor of M.I.S.C.
Multi-Systems & Internet Security Cookbook



On Wed, May 14, 2003 at 02:14:37PM +0200, Xavier Delannoy wrote:

> Hi, 

> 

> libnet 1.1 patch with : http://www.security-labs.org/Libnet/icmp_unreach-2.txt

--------------------------------------------------------------------- To unsubscribe, e-mail: libnet-unsubscribe@securityfocus.com For additional commands, e-mail: libnet-help@securityfocus.com

text/plain attachment: icmp_unreach.patch

Received on Wed May 14 12:56:03 2003

Do you need help?

This message: [ Message body ]
Next message: Mike Schiffman: "Token Ring Support for libnet?"
In reply to Xavier Delannoy: "Re: seems to be a bug ?"

Contemporary messages sorted: [ By Date ] [ By Thread ] [ By Subject ] [ By Author ] [ By messages with attachments ]

This archive was generated by hypermail 2.1.8 : Wed Aug 23 2006 - 14:02:23 EDT