Bugtraq mailing list archives

Re: More ssh fun (sshd this time)


From: hargrove () SCCM STANFORD EDU (Paul H. Hargrove)
Date: Wed, 27 Aug 1997 16:13:11 -0700


Thamer Al-Herbish writes:
[snip]
This problem is that ssh/sshd uses an int instead of an unsigned short to do
the comparison on. So wrapping doesnt occur till its placed in the struct
sockaddr_in.
[snip]

It looks like (from reading it, not from running it) the patch will
consider negative port numbers to be "privileged" rather than
"invalid", thus yielding the incorrect massage.  This is, of course, a
cosmetic problem rather than a functional one.
--
Paul H. Hargrove                   All material not otherwise attributed
hargrove () sccm stanford edu         is the opinion of the author or a typo.



Current thread: