[Bug 200545] New: CVE-2006-3913, freeciv: server buffer overflow issues

[Red Hat Bugzilla]

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug report.




https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=200545

           Summary: CVE-2006-3913, freeciv: server buffer overflow issues
           Product: Fedora Extras
           Version: fc5
          Platform: All
               URL: http://nvd.nist.gov/nvd.cfm?cvename=CVE-2006-3913
        OS/Version: Linux
            Status: NEW
          Severity: normal
          Priority: normal
         Component: freeciv
        AssignedTo: bdpepple(a)ameritech.net
        ReportedBy: ville.skytta(a)iki.fi
         QAContact: extras-qa(a)fedoraproject.org
                CC: extras-qa(a)fedoraproject.org,fedora-security-
                    list(a)redhat.com


CVE-2006-3913, http://nvd.nist.gov/nvd.cfm?cvename=CVE-2006-3913 :

Buffer overflow in Freeciv 2.1.0-beta1 and earlier, and SVN 15 Jul 2006 and
earlier, allows remote attackers to cause a denial of service (crash) and
possibly execute arbitrary code via a (1) negative chunk_length or a (2) large
chunk->offset value in a PACKET_PLAYER_ATTRIBUTE_CHUNK packet in the
generic_handle_player_attribute_chunk function in common/packets.c, and (3) a
large packet->length value in the handle_unit_orders function in server/unithand.c.

All FE-[345] and devel are probably affected.

-- 
Configure bugmail: https://bugzilla.redhat.com/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.

[Bug 200545] CVE-2006-3913, freeciv: server buffer overflow issues

[Red Hat Bugzilla]

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug report.

Summary: CVE-2006-3913, freeciv: server buffer overflow issues


https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=200545


bdpepple(a)ameritech.net changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |CLOSED
         Resolution|                            |NEXTRELEASE




------- Additional Comments From bdpepple(a)ameritech.net  2006-08-01 12:58 EST -------
Thanks for the bug report.  Packages should be available after the next
signing/push.

-- 
Configure bugmail: https://bugzilla.redhat.com/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.

[Bug 200545] CVE-2006-3913, freeciv: server buffer overflow issues

[Red Hat Bugzilla]

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug report.

Summary: CVE-2006-3913, freeciv: server buffer overflow issues


https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=200545


ville.skytta(a)iki.fi changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|CLOSED                      |NEW
           Keywords|                            |Reopened
         Resolution|NEXTRELEASE                 |




------- Additional Comments From ville.skytta(a)iki.fi  2006-08-02 13:56 EST -------
The CVE description of the vulnerability mentions three bugs, but the patch
applied in latest freeciv package revisions appears to address only two of them.

Maybe this is the missing piece?
http://svn.gna.org/viewcvs/freeciv?rev=12146&view=rev

-- 
Configure bugmail: https://bugzilla.redhat.com/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.

[Bug 200545] CVE-2006-3913, freeciv: server buffer overflow issues

[Red Hat Bugzilla]

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug report.

Summary: CVE-2006-3913, freeciv: server buffer overflow issues


https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=200545





------- Additional Comments From bdpepple(a)ameritech.net  2006-08-02 18:36 EST -------
Yeah, that should be added to my patch.  The report stated this was corrected on
July 16th, but the changes you referenced weren't applied to svn until July 24th.

-- 
Configure bugmail: https://bugzilla.redhat.com/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.

[Bug 200545] CVE-2006-3913, freeciv: server buffer overflow issues

[Red Hat Bugzilla]

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug report.

Summary: CVE-2006-3913, freeciv: server buffer overflow issues


https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=200545


ville.skytta(a)iki.fi changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |CLOSED
         Resolution|                            |ERRATA




------- Additional Comments From ville.skytta(a)iki.fi  2006-08-07 15:13 EST -------
Seems to be fixed now, thanks.

-- 
Configure bugmail: https://bugzilla.redhat.com/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.