summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
Diffstat (limited to 'net-fs/am-utils/files/am-utils-6.1.5-CVE-2008-1078.patch')
-rw-r--r--net-fs/am-utils/files/am-utils-6.1.5-CVE-2008-1078.patch21
1 files changed, 21 insertions, 0 deletions
diff --git a/net-fs/am-utils/files/am-utils-6.1.5-CVE-2008-1078.patch b/net-fs/am-utils/files/am-utils-6.1.5-CVE-2008-1078.patch
new file mode 100644
index 000000000000..f0965b4a855a
--- /dev/null
+++ b/net-fs/am-utils/files/am-utils-6.1.5-CVE-2008-1078.patch
@@ -0,0 +1,21 @@
+Index: am-utils-6.1.5/scripts/expn.in
+===================================================================
+--- am-utils-6.1.5.orig/scripts/expn.in
++++ am-utils-6.1.5/scripts/expn.in
+@@ -9,6 +9,7 @@
+ # hardcoded constants, should work fine for BSD-based systems
+ #require 'sys/socket.ph'; # perl 4
+ use Socket; # perl 5
++use Fcntl;
+ $AF_INET = &AF_INET;
+ $SOCK_STREAM = &SOCK_STREAM;
+
+@@ -1009,7 +1010,7 @@ sub mxlookup
+ }
+
+ $0 = "$av0 - nslookup of $server";
+- open(T,">/tmp/expn$$") || die "open > /tmp/expn$$: $!\n";
++ sysopen(T,"/tmp/expn$$", O_EXCL | O_CREAT) || die "open > /tmp/expn$$: $!\n";
+ print T "set querytype=MX\n";
+ print T "$server\n";
+ close(T);