Ticket History #5512: (krb5-1.5.x) MITKRB5-SA-2007-001: telnetd allows login as arbitrary user

# Fri Apr 06 15:42:38 2007 tlyu (Taylor Yu) - Ticket created

Subject:

(krb5-1.5.x) MITKRB5-SA-2007-001: telnetd allows login as arbitrary user

Download (untitled) / with headers
text/plain 79B

fix for krb5-1.5.x: MITKRB5-SA-2007-001: telnetd allows login as
arbitrary user

# Fri Apr 06 15:42:40 2007 tlyu (Taylor Yu) - Ticket 5512 RefersTo ticket 5508.

# Fri Apr 06 16:06:29 2007 tlyu (Taylor Yu) - Status changed from 'open' to 'resolved'

# Fri Apr 06 16:06:30 2007 tlyu (Taylor Yu) - Version_Fixed 1.5.3 added

# Fri Apr 06 16:06:30 2007 tlyu (Taylor Yu) - Correspondence added

From:	tlyu@mit.edu
Subject:	SVN Commit

Download (untitled) / with headers
text/plain 788B

pull up r19396 from trunk

r19396@cathode-dark-space: tlyu | 2007-04-03 17:27:25 -0400
ticket: new
subject: MITKRB5-SA-2007-001: telnetd allows login as arbitrary user
tags: pullup
target_version: 1.6.1

Fix MITKRB5-SA-2007-001:

* src/appl/telnet/telnetd/sys_term.c (start_login): Add "--"
argument preceding username, in addition to the original patch.
Explicitly check for leading hyphen in username.

* src/appl/telnet/telnetd/state.c (envvarok): Check for leading
hyphen in environment variables. On advice from Shawn Emery, not
using strchr() as in the original patch.

Commit By: tlyu

Revision: 19403
Changed Files:
_U branches/krb5-1-5/
U branches/krb5-1-5/src/appl/telnet/telnetd/state.c
U branches/krb5-1-5/src/appl/telnet/telnetd/sys_term.c

# Wed Dec 16 18:02:49 2015 tlyu (Taylor Yu) - CustomField pullup deleted