There exists security vulnerabilites in the monit HTTP interface, which could allow an attacker in the worst case to gain root access to the system. This issue only affect monit if monit is started with http server support. From: Robert Nagy <thuglife at bsd dot hu> No response from MAINTAINER.
13 lines
422 B
Plaintext
13 lines
422 B
Plaintext
$OpenBSD: patch-net_c,v 1.1 2004/04/13 08:57:59 brad Exp $
|
|
--- net.c.orig Sat Apr 10 07:22:56 2004
|
|
+++ net.c Sat Apr 10 07:26:58 2004
|
|
@@ -693,7 +693,7 @@
|
|
size= sizeof(struct sockaddr_in);
|
|
|
|
do {
|
|
- n= recvfrom(s, buf, STRLEN, 0, (struct sockaddr *)&sin, &size);
|
|
+ n= recvfrom(s, buf, STRLEN, 0, (struct sockaddr *)&sin, (socklen_t *)&size);
|
|
} while(n == -1 && errno == EINTR);
|
|
|
|
if(n < 0)
|