cvs commit: src/usr.sbin/pppd cbcp.c

Xin LI delphij at FreeBSD.org
Fri Nov 19 09:41:10 GMT 2004


On Thu, Nov 18, 2004 at 03:38:25PM +0000, Josef El-Rayes wrote:
> Xin LI <delphij at FreeBSD.org>:
> >   Correct a potential DoS vulnerability, as described at
> >   
> >   http://www.securityfocus.com/archive/1/379450
> 
> This advisory is incorrect.
> 
> It is actually not a DoS vulnerability as the attacker
> can only kill the connection to him, not others,

Hmm... Thanks for pointing this out.  Do I need to do a forced
commit to explain this?

Cheers,


More information about the cvs-src mailing list