search for: slc_add_reply

...he following sections, please visit <URL:http://www.freebsd.org/security/>. I. Background The telnet(1) command is a TELNET protocol client, used primarily to establish terminal sessions across a network. II. Problem Description Buffer overflows were discovered in the env_opt_add() and slc_add_reply() functions of the telnet(1) command. TELNET protocol commands, options, and data are copied from the network to a fixed-sized buffer. In the case of env_opt_add (CAN-2005-0468), the buffer is located on the heap. In the case of slc_add_reply (CAN-2005-0469), the buffer is global uninitialized d...

...he following sections, please visit <URL:http://www.freebsd.org/security/>. I. Background The telnet(1) command is a TELNET protocol client, used primarily to establish terminal sessions across a network. II. Problem Description Buffer overflows were discovered in the env_opt_add() and slc_add_reply() functions of the telnet(1) command. TELNET protocol commands, options, and data are copied from the network to a fixed-sized buffer. In the case of env_opt_add (CAN-2005-0468), the buffer is located on the heap. In the case of slc_add_reply (CAN-2005-0469), the buffer is global uninitialized d...