oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

Fix CVE-2011-4862 Buffer overflow in libtelnet/encrypt.c in telnetd

Browse Source 
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4862
    http://security.freebsd.org/advisories/FreeBSD-SA-11:08.telnetd.asc
    http://security.freebsd.org/patches/SA-11:08/telnetd.patch
This commit is contained in:
Nicolas Williams
2011-12-28 17:50:30 -06:00
parent 5ca056969a
commit 7d7624f7f7
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
appl/telnet/libtelnet/encrypt.c
View File

@@ -736,6 +736,9 @@ encrypt_keyid(struct key_info *kp, unsigned char *keyid, int len)
int dir = kp->dir; int dir = kp->dir;
int ret = 0; int ret = 0;
if (len > MAXKEYLEN)
len = MAXKEYLEN;
if (!(ep = (*kp->getcrypt)(*kp->modep))) { if (!(ep = (*kp->getcrypt)(*kp->modep))) {
if (len == 0) if (len == 0)
return; return;