pkg/41371: net/ctorrent-1.3.4nb2 exploit

[jgw%freeshell.org@localhost]

>Number:         41371
>Category:       pkg
>Synopsis:       net/ctorrent-1.3.4nb2 exploit
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    pkg-manager
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Wed May 06 20:20:00 +0000 2009
>Originator:     Jeff Woodall
>Release:        NetBSD 4.99.59
>Organization:
na
>Environment:
NetBSD think.sleepy.cat 4.99.59 NetBSD 4.99.59 (GENERIC.NOACPI) #0: Sun Apr 13 
07:56:12 UTC 2008  
bouyer%b2.netbsd.org@localhost:/home/builds/ab/HEAD/i386/200804120000Z-obj/home/builds/ab/HEAD/src/sys/arch/i386/compile/GENERIC.NOACPI
 i386
>Description:
There seems to be some security issues for the cTorrent app:                    
                                               
                                                                                
                                               
http://www.securityfocus.com/bid/34584/discuss                                  
                                               
http://www.milw0rm.com/exploits/8470                                            
                                               
                                                                                
                                               
This may have gotten missed due to ctorrent's association with the dtorrent[1]  
                                               
(enhanced cTorrent) project which is based on the former. The latter has        
                                               
supposably been patched in it's SYN repository but as ctorrent is no longer     
                                               
maintained it's source code probably won't get fixed.                           
                                               
                                                                                
                                               
[1] http://sourceforge.net/projects/dtorrent/
>How-To-Repeat:

>Fix: