if sshguard is setuid and attacker has access to the box, root can be gained using crafted input.
Changes:
Changed the size of pidfilename array to FILENAME_MAX and then check to make sure the length of the supplied filename is within this limit. If not the error is logged and application terminates.
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
patch for sshguard_procauth.c
if sshguard is setuid and attacker has access to the box, root can be gained using crafted input.
Changes:
Changed the size of pidfilename array to FILENAME_MAX and then check to make sure the length of the supplied filename is within this limit. If not the error is logged and application terminates.
integrated