Sined's WEB Page		/ news translations patches projects presentations links exploits
bringing the knowledge in security to those who are looking for it
support the most interesting opensource projects in security
By Denis Ducamp <Denis.Ducamp(at)groar.org>		Pour les francophones...

Sined's patches WEB Page

August 11, 2003...

Collection of patches I wrote for various reasons...

dsniff
hping
Openwall: popa3d
Others...: FreeBSD tail, xpdf, bing, chntpw
Obsoletes patches

1. dsniff

1.1 dsniff-2.4b1

(03/07/14) My ready to be compiled source package of dsniff-2.4b1. This package :
- corrects incompatibilities with newer autoconf
- detects libnet version and warns when 1.1 or newer is used
  dsniff has been developped for libnet 1.0 and libnet 1.1 is incompatible with libnet 1.0. Not dsniff's fault but libnet fault.
  With this package a limited set of tools can be compiled with libnet 1.1. Do read the *.sined files in the source package before beginning to compile with libnet 1.1.
- improves libdb detection.
- etc.
I hope the #1 question in my mbox will not be "I can't compile dsniff" anymore. I will no more reply to such questions.
Some older versions are here, here and here.
(02/08/26) My newer patch to compile dsniff 2.4b1 on "broken" Linux systems such as newer RedHat and Mandrake (./record.c:133: `R_NOOVERWRITE' undeclared... ./record.c:146: `R_NEXT' undeclared...).
- Apply the patch: patch -p1 < dsniff-2.4-configure.in.2.diff
- Rebuild configure: autoconf
- Configure: ./configure
- Compile: make
(01/06/23) My older patch to compile dsniff 2.4b1 on "broken" Linux systems such as RedHat 7.1 and Mandrake 8.0 (./record.c:133: `R_NOOVERWRITE' undeclared... ./record.c:146: `R_NEXT' undeclared...).
- Same commands as above, just change the name of the patch ;-)
(01/06/21) My patch to compile dsniff 2.4b1 on glibc 2.2.x systems (./sshow.c:225: `CLK_TCK' undeclared...).
(01/04/11) My portability patch for dsniff 2.4b1 under Linux libc5.

1.2 dsniff-2.3

(02/08/26) My patch to compile dsniff 2.3 on "broken" Linux systems such as RedHat and Mandrake (./record.c:130: `R_NOOVERWRITE' undeclared... ./record.c:143: `R_NEXT' undeclared...).
- Same commands as above, just change the name of the patch ;-)

1.3 dsniff-2.2

Port of dsniff under libc5 Linux systems.
Actually the patch for dsniff (not other utilities) was sent to the dsniff list and should be incorporated into the 2.3 version.
Addition of protocols to dsniff.
Actually the patch to repair the http proxy and to add smtp and apop was sent to the dsniff list. Let's see in the 2.3 version ... but challenge response algorithms should not be added.
To use the patch, apply and run autoconf. mountd will be deactivated because I'm working on my libc5 system. To reactivate mountd on other systems, add decode_mountd.c after decode_mmxp.c in Makefile.in before running autoconf.

2. hping

2.1 hping2-beta54

(01/06/21) My patch to compile hping2-beta54 on glibc 2.2.x systems (getusec.c:17: `NULL' undeclared...).
(01/04/06) My patch for hping2-beta54 to repair output of the --seqnum option.

3. Openwall

3.1 popa3d-0.4

My portability patches for the Dug Song's apop patch for Solar Designer's popa3d. To be applied over the Dug Song's patch:
- (00/09/01)My latest patch after some tests under FreeBSD and glibc: everything works well. Unfortunately it coredumps under libc5 :-(
  Bug: POP3 doesn't work anymore (I hope it's caused by Dug Song's patch ;-).
- (00/08/29)My third patch permitting compilation under libc5 (tested under Slackware 4) using as well system's db functions as those from gdbm.
  popa3d isn't tested, my apop command works.
- (00/08/29)My second patch permitting compilation under FreeBSD (tested under 3.4) using as well system's md5 functions as those from OpenSSL and system's db functions as those from gdbm.
  popa3d isn't tested, my apop command works.
- (00/08/29)My first patch to make it work under Linux (only tested under glibc 2.1.2).
  Added a apop command permitting to calculate md5(challenge,clear_text_password) to test popa3d by telneting to it.

4. Others...

4.1 FreeBSD tail

(03/06/03)A new version uses autoconf/automake to configure and build. This version works under Linux, FreeBSD and Solaris. Olders versions with autoconf/automake are available here, here and here.
Note: GNU's tail has the option --follow=name which is equivalent to FreeBSD's -F. These new versions only permited me to learn some things with autoconf/automake.
(00/08/28)An old version of tail coming from FreeBSD just after addition of the -F option.
```
     -F      The -F option implies the -f option, but tail will also check to
             see if the file being followed has been renamed or rotated.  The
             file is closed and reopened when tail detects that the filename
             being read from has a new inode number.  The -F option is ignored
             if reading from standard input rather than a file.
```
The goal is to be able to type tail -F /var/log/full-log | statistical_script without having to manage them during the log rotation. Slightly modified to compile successfully under Linux (libc5 and glibc 2.1.2) and always under FreeBSD (3.4).

That code doesn't compile under solaris because following BSD functions are missing: err, warn, warnx et errx.

Possible correct operation test:
- 1st window: touch blah ; ./tail -F blah
- 2nd window: i=0 ; while : ; do mv -f blah blah.1 ; echo $i > blah ; i=`expr $i + 1` ; sleep 1 ; done
(00/09/28)Running without interruption since more than a month (under a libc5 system) with log rotation every night (by logrotate) without any apparent problem :-)

4.2 xpdf-2.01

(03/01/02) My pdf export patch for xpdf-2.01. This patch permits to cut&paste and print "protected" pdf documents. Patches for older versions are available here and here.

4.3 bing-1.0.5

(01/01/20) My portability patch for bing-1.0.5 by Pierre Beyssac under glibc 2.1.x. Tested under RedHat 6.0 and Slackware 7.0 and 7.1 . Apply successfully under Slackware 7.1 current (glibc 2.2.2).

4.4 chntpw-000607

(00/08/31)A patch for chntpw to use des and md4 functions from OpenSSL.
- To have md4 in OpenSSL, you must use a recent version of OpenSSL (a snapshot from the 00/08/15) or this patch (71Ko) by Assar Westerlund for the 0.9.5a version.
- Here is a little shell script catsam.sh using chntpw to list the users contained in a sam file.
- (01/01/07)The new version of chntpw have my patch integrated in standard.

5. Obsoletes patches

portability patches and additions of functionalities for a set of utilities which are still private :-(
Port libnids under libc5 Linux systems (my personal firewall is under Slackware 4.0).
Integrated in the libnids-1.14.tar.gz version. Thanks to Rafal Wojtczuk.
Caution: the 1.14 version doesn't work under 64 bits Solaris (this has nothing to see with the libc5 port), use the 1.13 version.
Improve the crypt support in Ollivier Robert's calife: supports MD5 only under FreeBSD and DES everywhere.
Actually standard in the 2.8.4 version: calife supports any algorithm supported by the current system, for example blowfish under OpenBSD.

Linux 2.4.0-test doesn't compile directly under Slackware 4.0...
Apply the following patch and everything is allright :

--- linux_old/arch/i386/kernel/traps.c  Sat Jun 24 19:01:20 2000
+++ linux/arch/i386/kernel/traps.c      Sat Jun 24 19:02:11 2000
@@ -50,6 +50,9 @@

 #include <linux/irq.h>

+#undef cpu_has_xmm
+#define cpu_has_xmm 0
+
 asmlinkage int system_call(void);
 asmlinkage void lcall7(void);
 asmlinkage void lcall27(void);

Hits since 2001/07/01: [an error occurred while processing this directive]