• info
• discussion
• exploit
• solution
• references

FreeBSD getnameinfo() Denial of Service Vulnerability

Solution:
FreeBSD has supplied upgrades to fix this vulnerability.


FreeBSD FreeBSD 4.0

• FreeBSD 4.x: getnameinfo.patch
  Download the patch,Execute the following commands as root:# cd /usr/src/lib/libc# patch -p < /path/to/patch_or_advisory# make depend && make all install
  ftp://ftp.freebsd.org/pub/FreeBSD/CERT/patches/SA-00:63/getnameinfo.pa tch