>Number: 163555 >Category: misc >Synopsis: [PATCH] bitchx port is out of date and BitchX 1.2 does not >compile (fix included) >Confidential: no >Severity: critical >Priority: high >Responsible: freebsd-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: update >Submitter-Id: current-users >Arrival-Date: Fri Dec 23 04:00:20 UTC 2011 >Closed-Date: >Last-Modified: >Originator: Dan Mashal >Release: FreeBSD 9.0-RC3 >Organization: net >Environment: FreeBSD w00p 9.0-RC3 FreeBSD 9.0-RC3 #0: Sun Dec 4 08:56:36 UTC 2011 r...@farrell.cse.buffalo.edu:/usr/obj/usr/src/sys/GENERIC amd64 >Description: Old obsolete, insecure version.
The current version of BitchX, released in 2004, have security problems allowing remote IRC servers to execute arbitrary code on the client's machine (CVE-2007-3360, CVE-2007-4584). http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2007-3360 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2007-4584 BitchX 1.2 is release ready per developers (caf) and should be added to the ports tree. It is stable. However, in order for it to compile on BitchX 9 the configure file must be patched. I would also like to become the maintainer of the BitchX port. >How-To-Repeat: run the following commands: 0) Be running FreeBSD9.0-RC3 system. 1) svn co https://bitchx.svn.sourceforge.net/svnroot/bitchx/trunk bitchx-trunk 2) cd bitchx-trunk 3) ./configure Receive error about unterminated quoted strings. >Fix: Change the configure file in the BitchX1.2 source. lines changed in configure file: 12668 and 13936 diff: # diff configure.old configure.new 12668c12668 < system="MP-RAS-`$AWK '{print $3}' /etc/.relid'`" --- > system="MP-RAS-$AWK {print $3} /etc/.relid" 13936c13936 < system="MP-RAS-`$AWK '{print $3}' /etc/.relid'`" --- > system="MP-RAS-$AWK {print $3} /etc/.relid" >Release-Note: >Audit-Trail: >Unformatted: _______________________________________________ freebsd-bugs@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-bugs To unsubscribe, send any mail to "freebsd-bugs-unsubscr...@freebsd.org"
