what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 1 of 1

Files from Marc Olzheim

FreeBSD-SA-05-02.sendfile.txt

Posted Apr 17, 2005

Authored by Sven Berkvens, Marc Olzheim | Site freebsd.org

FreeBSD Security Advisory FreeBSD-SA-05:02 - The sendfile(2) system call allows a server application (such as an HTTP or FTP server) to transmit the contents of a file over a network connection without first copying it to application memory. High performance servers such as Apache and ftpd use sendfile. If the file being transmitted is truncated after the transfer has started but before it completes, sendfile(2) will transfer the contents of more or less random portions of kernel memory in lieu of the missing part of the file.

tags | advisory, web, kernel

systems | freebsd

advisories | CVE-2005-0708

SHA-256 | f23b5fbf03b2582e71dc290dd2da453c3f35c25347c573b97a39ab6a5ff37a46

Download | Favorite | View