bugzilla-daemon at bugzilla.mindrot.org
2007-Oct-22  17:43 UTC
[Bug 1378] New: incorrect port check in parse_forward()
https://bugzilla.mindrot.org/show_bug.cgi?id=1378
           Summary: incorrect port check in parse_forward()
    Classification: Unclassified
           Product: Portable OpenSSH
           Version: 4.7p1
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: normal
          Priority: P3
         Component: ssh
        AssignedTo: bitbucket at mindrot.org
        ReportedBy: Jan.Pechanec at Sun.COM
Created an attachment (id=1365)
 --> (http://bugzilla.mindrot.org/attachment.cgi?id=1365)
fix for the bug
the check whether ports were parsed OK is not correct; it doesn't
recognize when only one of the ports is incorrect:
# ./ssh -L 99999:localhost:4444 localhost
Password:
# ./ssh -L 99999:localhost:88888 localhost 
Bad local forwarding specification '99999:localhost:88888'
this happens only when root uses ssh(1). Unprivileged client gets an
error  "privileged port".
patch attached.
-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
bugzilla-daemon at bugzilla.mindrot.org
2007-Nov-03  00:22 UTC
[Bug 1378] incorrect port check in parse_forward()
https://bugzilla.mindrot.org/show_bug.cgi?id=1378
Damien Miller <djm at mindrot.org> changed:
           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |FIXED
                 CC|                            |djm at mindrot.org
             Blocks|                            |1353
--- Comment #1 from Damien Miller <djm at mindrot.org>  2007-11-03
11:22:21 ---
fix has been applied - thanks.
-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.
bugzilla-daemon at bugzilla.mindrot.org
2008-Mar-31  04:22 UTC
[Bug 1378] incorrect port check in parse_forward()
https://bugzilla.mindrot.org/show_bug.cgi?id=1378
Damien Miller <djm at mindrot.org> changed:
           What    |Removed                     |Added                       
----------------------------------------------------------------------------
             Status|RESOLVED                    |CLOSED                      
--- Comment #2 from Damien Miller <djm at mindrot.org>  2008-03-31
15:22:07 ---
Fix shipped in 4.9/4.9p1 release.
-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.
Possibly Parallel Threads
- [Bug 1380] New: incorrect check for strlen(fwd->connect_host) in parse_forward()
- [Bug 1379] New: memory leak in process_cmdline()
- [Bug 1390] New: RekeyLimit max value is too restrictive
- [Bug 1385] New: extra backslashes in RB_PROTOTYPE
- [Bug 1432] New: MaxAuthTries is not used correctly