cfingerd

Changelog for version 1.4.0

Releasedate: 08/09/99

• New source maintainer
• Several bugfixes
• Use tail +2 for userlist
• Fixed silly bug in src/search.c
• src/search.c: If the internal search.*@ is used the whole GCOS field won't be sent out anymore.
• Fixed string bugs in standard.c.
• Ignore empty lines when collecting remote data
• Flagged SIGPIPE as fatal
• Corrected logfile writing as user, thanks to Thomas Gebhardt
• Corrected search_fake() which depended on 80 char strings but received a 100 character one. (most recent on bugtraq, fixed on 12 May 1998)
• Corrected RFC1413 code
• Corrected check_illegal() for .nofinger
• Corrected wrong calls for check_illegal()
• Fixed a security hole in privs.h.
• Fixed typo in userlist/display.c which crashed userlist
• Proper exception if ident doesn't provide useful info
• Added patch to support Qmail mailboxes, thanks to Russell Coker
• Removed investigation of the hostname within Configure script
• src/main.c: Added support for /W, actually it's ignored...
• Added define HAVE_TTY_GROUP so add support for non-world-writable tty's owned by group tty
• Used config option for .nofinger file instad of static ".nofinger"
• Added space before [MSG-N]
• Reworked search.* routine.
• Documentation update
• Restricted length of username, fixes possible overflow in show_search() and handle_fakeuser()
• Converted all dangerous occurrances of strcpy() to strncpy()
• More updates wrt. sane permissions when opening files
• Increased limit of tty per user, now I'm fingerable again. :)
• cfingerd now uses the same IP number on which it receives a request to connect to a remote ident server. Thanks for help from Torsten Landschoff
• cfingerd now honors broken or negative ident answers
• Support for SunOS by Piotr Klaban
• Support 24h clocks, inspired by Piotr Klaban
• Removed ACTUAL_HOSTNAME since it has been superseeded by calls to gethostname()
• Experimental code for standalone cfingerd, inspired by Piotr Klaban
• Fixed userlist that crashed at too many users and too long hostnames
• Fixed non-working userlist-only
• Added ALLOW_CONFESSION to provide "help" and "version" information
• Added support for userlist@ (and userlist-online@ internally) as modification of @ (system list) that displays only non-idle users.
• Fixed security bug that caused external programs to gain root access.
• Adjusted search facility, you can't get a userlisting anymore

Download

Download