Public bug reported:

Binary package hint: samba-doc

samba-doc/examples/scripts/eventlog/parselog.pl have format string bug .

test case :
emanuel@amd64 /tmp>>echo '1 1 1 %n' | perl 
/usr/share/doc/samba-doc/examples/scripts/eventlog/parselog.pl
Modification of a read-only value attempted at 
/usr/share/doc/samba-doc/examples/scripts/eventlog/parselog.pl line 30, <> line 
1.
emanuel@amd64 /tmp>>echo '1 1 1 1 %n' | perl 
/usr/share/doc/samba-doc/examples/scripts/eventlog/parselog.pl
Modification of a read-only value attempted at 
/usr/share/doc/samba-doc/examples/scripts/eventlog/parselog.pl line 30, <> line 
1.

the bug can be found at :
    $outstr = sprintf "TMG: %d\nTMW: %d\nEID: 1000\nETP: INFO\nECT: 0\nRS2: 
0\nCRN: 0\nUSL: 0\nSRC: Syslog\nSRN: $cname\nSTR: $ln\nDAT:\n\n",time(),time();

fix : use %s to $cname and $ln .
$outstr = sprintf "TMG: %d\nTMW: %d\nEID: 1000\nETP: INFO\nECT: 0\nRS2: 0\nCRN: 
0\nUSL: 0\nSRC: Syslog\nSRN: %s\nSTR: %s\nDAT:\n\n",time(),time(),$cname,$ln;

** Affects: samba (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to samba in Ubuntu.
https://bugs.launchpad.net/bugs/793694

Title:
  Format string bug in parselog.pl

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

Reply via email to