mailing list of musl libc
 help / color / mirror / code / Atom feed
From: Harald Becker <ralda@address4me.eu>
To: musl@lists.openwall.com
Subject: Re: Re: Security advisory for musl libc - stack-based buffer overflow in ipv6 literal parsing [CVE-2015-1817]
Date: Sat, 18 Apr 2015 20:13:50 +0200	[thread overview]
Message-ID: <55329EDE.8020204@address4me.eu> (raw)
In-Reply-To: <20150418163702.GI6817@brightrain.aerifal.cx>

Hi Rich !

On 18.04.2015 18:37, Rich Felker wrote:
> Odd. I just verified that  Google's 8.8.8.8 resolves it right, so I
 > don't know what's wrong, but it seems to be on your end. Let me know
 > if you find anything that looks like a problem on my side.

I verified this again:

A-record lookup gets correct address, but MX lookup get's:

libc.org    mail exchanger = 10 mail.aerifal.cx.

... and that neither works when using Mozilla Thunderbird, nor claws 
mail on any current Linux distribution, when sending through the mail 
relay of GMX (United Internet = one of the major Internet provider in 
Germany). The SMTP to the mail relay rejects any mail to domain libc.org 
(SMTP error response).

Sorry it's neither my software, nor is there any way for me to change 
the kind of lookup done on the mail relay of the provider. Postmaster 
answer of mail relay was simple: Not a failure of mail relay, your MX 
lookup erroneously return a CNAME and not an IP address.

Harald


  parent reply	other threads:[~2015-04-18 18:13 UTC|newest]

Thread overview: 24+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2015-04-17 13:10 Matt Johnston
2015-04-17 17:23 ` Rich Felker
2015-04-17 18:03   ` Rich Felker
2015-04-17 18:09     ` Solar Designer
2015-04-18 13:32       ` Matt Johnston
2015-04-18 15:25         ` Rich Felker
2015-04-18 15:49           ` Harald Becker
2015-04-18 15:58             ` Rich Felker
2015-04-18 16:27               ` Harald Becker
2015-04-18 16:37                 ` Rich Felker
2015-04-18 17:07                   ` Harald Becker
2015-04-18 18:27                     ` Laurent Bercot
2015-04-18 18:47                       ` Harald Becker
2015-04-18 18:13                   ` Harald Becker [this message]
2015-04-18 19:56                     ` Rich Felker
2015-04-18 21:02                       ` Laurent Bercot
2015-04-19  3:44                         ` Rich Felker
2015-04-20 10:17                           ` Harald Becker
2015-04-20 11:20                             ` Kurt H Maier
2015-04-20 11:35                               ` Harald Becker
2015-04-20 11:50                                 ` Harald Becker
2015-04-20 14:14                                 ` Kurt H Maier
2015-04-20 14:21                                   ` Harald Becker
2015-04-18 18:25                   ` Harald Becker

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=55329EDE.8020204@address4me.eu \
    --to=ralda@address4me.eu \
    --cc=musl@lists.openwall.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
Code repositories for project(s) associated with this public inbox

	https://git.vuxu.org/mirror/musl/

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).