search for: radix_to_cr

...ploitable buffer overflow From: Marcell Fodor <m.fodor at mail.datanet.hu> Date: 19 Apr 2002 22:42:51 -0000 (Sat 01:42 EEST) To: bugtraq at securityfocus.com effect: local root vulnerable services: -pass Kerberos IV TGT -pass AFS Token bug details: radix.c GETSTRING macro in radix_to_creds function may cause buffer overflow. affected buffers: creds->service creds->instance creds->realm creds->pinst exploit code here: mantra.freeweb.hu

...Priority: P3 Component: Build system AssignedTo: openssh-unix-dev at mindrot.org ReportedBy: argent at thayer.dartmouth.edu When compiling Openssh-3.6.1p1 for linux (on RedHat-7.3), linking of the ssh and sshd binaries fails, complaining that creds_to_radix (or radix_to_creds) cannot be found. The problem is that radix.o is not included in the makefile rules for these targets. I ran configure as: ./configure --prefix=/usr/etc/openssh/ --with-pam --with-kerberos4=/usr/local/krb4 --with-afs --sysconfdir=/etc/ssh --bindir=/usr/bin --mandir=/usr/local/man --with-pid-d...

...ect1.o: In function `send_afs_tokens': /home/jnfergu/openssh/sshconnect1.c:783: undefined reference to `krb_time_to_life' ./libssh.a(radix.o): In function `creds_to_radix': /home/jnfergu/openssh/radix.c:129: undefined reference to `krb_life_to_time' ./libssh.a(radix.o): In function `radix_to_creds': /home/jnfergu/openssh/radix.c:192: undefined reference to `krb_time_to_life' collect2: ld returned 1 exit status make: *** [ssh] Error 1 I myself am not much of a programmer, well not a very good one, and am kinda lost on what I should do from here, so any help would be appreciated....

...: Error parsing parameter list. Found "*" when expecting one of: ",", ")". (notexpecting) int creds_to_radix(CREDENTIALS *, u_char *, size_t); ------------------------------------^ cc: Error: radix.h, line 28: Ill-formed parameter type list. (parmtyplist) int radix_to_creds(const char *, CREDENTIALS *); --------------------------------------^ cc: Error: sshconnect1.c, line 786: In this declaration, "CREDENTIALS" must specify a type. (badparsedecl) CREDENTIALS creds; --------^ cc: Error: sshconnect1.c, line 736: In this statement, "CREDENTIALS...