Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
Apache2: stack smashing attack in function logio_in
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
bornsilly
n00b
n00b


Joined: 23 Dec 2003
Posts: 16
Location: Netherlands

PostPosted: Tue Jul 26, 2005 6:16 am    Post subject: Apache2: stack smashing attack in function logio_in Reply with quote

Hi,

Ever since a have done a update a while ago, i am unable to connect to Apache, although the server does start it adds a entry in the error_log file with the following message "apache2: stack smashing attack in function logio_in_filter()" whenever i try to access a page.

I have removed the fstack-protector-all in my make.conf and recompiled Apache but the problem still remains.

Hope somebody can help me.

Marco.
Back to top
View user's profile Send private message
taky
n00b
n00b


Joined: 24 Jul 2005
Posts: 31
Location: Japan

PostPosted: Thu Jul 28, 2005 2:57 pm    Post subject: Reply with quote

Could you please post the output of 'emerge --info'?
Back to top
View user's profile Send private message
sean_pereira
n00b
n00b


Joined: 25 Nov 2003
Posts: 5

PostPosted: Wed Oct 05, 2005 7:20 am    Post subject: Reply with quote

I too seem to face a similar problem. Has anyone found a solution or has any ideas what to look for ?
Thanks,
Sean

Here is the output from emerge --info ...

Portage 2.0.53_rc3 (default-linux/x86/2005.0, gcc-3.4.4, glibc-2.3.5-r0, 2.6.11-gentoo-r5 i686)
=================================================================
System uname: 2.6.11-gentoo-r5 i686 Pentium III (Coppermine)
Gentoo Base System version 1.6.12
dev-lang/python: 2.3.5
sys-apps/sandbox: 1.2.8
sys-devel/autoconf: 2.13, 2.59-r6
sys-devel/automake: 1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.5
sys-devel/binutils: 2.16-r1
sys-devel/libtool: 1.5.14
virtual/os-headers: 2.6.11-r1
ACCEPT_KEYWORDS="x86 ~x86"
AUTOCLEAN="yes"
CBUILD="i686-pc-linux-gnu"
CFLAGS="-march=pentium3 -O2 -fomit-frame-pointer -pipe"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/kde/2/share/config /usr/kde/3/share/config /usr/lib/X11/xkb /usr/share/config /var/bind /var/qmail/control"
CONFIG_PROTECT_MASK="/etc/gconf /etc/terminfo /etc/env.d"
CXXFLAGS="-march=pentium3 -O2 -fomit-frame-pointer -pipe"
DISTDIR="/usr/portage/distfiles"
FEATURES="autoconfig distlocks sandbox sfperms strict"
GENTOO_MIRRORS="ftp://ftp.planetmirror.com/pub/gentoo/ http://mirror.datapipe.net/gentoo http://mirror.isp.net.au/ftp/pub/gentoo/ http://public.planetmirror.com/pub/gentoo/"
MAKEOPTS="-j2"
PKGDIR="/usr/portage/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
SYNC="rsync://rsync.gentoo.org/gentoo-portage"
USE="x86 X acpi alsa apache2 apm avi berkdb bitmap-fonts crypt cups eds emboss encode fam foomaticdb fortran gdbm gif gpm gstreamer gtk gtk2 hal hardened imlib ipv6 jpeg libg++ libwww mad mikmod motif mp3 mpeg mysql ncurses nls ogg oggvorbis opengl oss pam pdflib perl png python qt quicktime readline samba sdl spell ssl tcpd tiff truetype truetype-fonts type1-fonts vorbis xml2 xmms xv zlib userland_GNU kernel_linux elibc_glibc"
Unset: ASFLAGS, CTARGET, LANG, LC_ALL, LDFLAGS, LINGUAS, PORTDIR_OVERLAY
Back to top
View user's profile Send private message
j-m
Retired Dev
Retired Dev


Joined: 31 Oct 2004
Posts: 975

PostPosted: Wed Oct 05, 2005 7:34 am    Post subject: Re: Apache2: stack smashing attack in function logio_in Reply with quote

bornsilly wrote:

I have removed the fstack-protector-all in my make.conf and recompiled Apache but the problem still remains.


You probably need to re-emerge apr and apr-util as well, at minimum. Adding such flag globally is a bad idea...
Back to top
View user's profile Send private message
sean_pereira
n00b
n00b


Joined: 25 Nov 2003
Posts: 5

PostPosted: Fri Oct 07, 2005 5:46 am    Post subject: Reply with quote

Thanks j-m,

Your tip solved my problem!
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum