diff options
Diffstat (limited to 'main/arpwatch/CVE-2012-2653.patch')
-rw-r--r-- | main/arpwatch/CVE-2012-2653.patch | 12 |
1 files changed, 12 insertions, 0 deletions
diff --git a/main/arpwatch/CVE-2012-2653.patch b/main/arpwatch/CVE-2012-2653.patch new file mode 100644 index 0000000000..c37b5132ed --- /dev/null +++ b/main/arpwatch/CVE-2012-2653.patch @@ -0,0 +1,12 @@ +diff -u arpwatch-2.1a15/arpwatch.c arpwatch-2.1a15/arpwatch.c
+--- arpwatch-2.1a15/arpwatch.c
++++ arpwatch-2.1a15/arpwatch.c
+@@ -153,7 +153,7 @@
+ struct passwd* pw;
+ pw = getpwnam( user );
+ if ( pw ) {
+- if ( initgroups(pw->pw_name, 0) != 0 || setgid(pw->pw_gid) != 0 ||
++ if ( initgroups(pw->pw_name, pw->pw_gid) != 0 || setgid(pw->pw_gid) != 0 ||
+ setuid(pw->pw_uid) != 0 ) {
+ syslog(LOG_ERR, "Couldn't change to '%.32s' uid=%d gid=%d", user,pw->pw_uid, pw->pw_gid);
+ exit(1);
|