5495045 2000-09-20  21:18  /27 rader/ Brevbäraren (som är implementerad i) Python
Mottagare: Bugtraq (import) <12885>
Ärende: kvt format bug
------------------------------------------------------------

kdebase-1.1.2

xsetup.c:229
  display_name = getenv("DISPLAY");

command.c:1720
  extern char *display_name;

command.c:1840
          cprintf(display_name);

command.c:1464
void cprintf(unsigned char *fmt,...)


Patch attached.
--
	 _________________________
	 Carlos E Gorges
	 (carlos@techlinux.com.br)
	 Tech informática LTDA
	 Brazil
	 _________________________
(5495045) ------------------------------------------
Kommentar i text 5495046 av Brevbäraren (som är implementerad i) Python
Kommentar i text 5498971 av Brevbäraren (som är implementerad i) Python

5495046 2000-09-20  21:18  /2 rader/ Brevbäraren (som är implementerad i) Python
Mottagare: Bugtraq (import) <12886>
Kommentar till text 5495045 av Brevbäraren (som är implementerad i) Python
Ärende: Bilaga (kvt-formatbug.diff.gz) till: kvt format bug
------------------------------------------------------------
‹‚È9kvt-formatbug.diff…ÁnÂ0DÏñW¬@ÆÁNŠÒ¸—ôʅÞ#ã8`…Ø–í
õÐoTAQ@¢{ÙỠF·-íà¡kÔ^EXÊÒlݝãZÚ¾¦IåÔ#QÉã@„g’kà}8@Nœ–üe¬,K„1þ÷{ò9(Ø)7&
Ë9e<Ë!£”¢ªÂ^óbU¾ìªBék¯œõ±v6設Y,ß~­½W¢Ïëȱ
àˆÀMs^›Ø.ÜI|ÕFôjŒãGb6³Õv£þʒo4U~ÿí¦¨y

(5495046) ------------------------------------------(Ombruten)

5498971 2000-09-21  21:04  /31 rader/ Brevbäraren (som är implementerad i) Python
Mottagare: Bugtraq (import) <12898>
Kommentar till text 5495045 av Brevbäraren (som är implementerad i) Python
Ärende: Re: kvt format bug
------------------------------------------------------------
From: Harri Porten <porten@KDE.ORG>
To: BUGTRAQ@SECURITYFOCUS.COM
Message-ID: <39C917FC.875E3B75@kde.org>

Hi !

Carlos Eduardo Gorges wrote:
>
> kdebase-1.1.2

This version will be soon obsoleted by KDE 2.0 but we'll fix this
issue in our CVS anyway and try to propagate the patch. kvt has been
abandonned completely as we saw no way of maintaining it any further
(too much old rxvt code like this one in).

The questions remains which distributions are affected ? My COL 4.2
doesn't have kvt installed with setuid root permissions.

>   ------------------------------------------------------------------------
>                             Name: kvt-formatbug.diff.gz
>    kvt-formatbug.diff.gz    Type: application/x-gzip
>                         Encoding: base64

I already asked Carlos to resend the patch to me as at least my
version was corrupted somehow.

Thanks,

Harri.
(5498971) ------------------------------------------(Ombruten)