Package: dsniff / 2.4b1+debian-29

Metadata

Package Version Patches format
dsniff 2.4b1+debian-29 3.0 (quilt)

Patch series

view the series file
Patch File delta Description
01_time.h.patch | (download)

msgsnarf.c | 1 1 + 0 - 0 !
sshow.c | 1 1 + 0 - 0 !
2 files changed, 2 insertions(+)

 include <time.h> to fix segfault on some architectures.
Bug-Debian: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=315969

02_mailsnarf_corrupt.patch | (download)

mailsnarf.c | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

 mailsnarf does not parse mail correctly.
Bug-Debian: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=149330

03_pcap_read_dump.patch | (download)

dsniff.8 | 5 4 + 1 - 0 !
dsniff.c | 29 23 + 6 - 0 !
filesnarf.8 | 4 3 + 1 - 0 !
filesnarf.c | 30 23 + 7 - 0 !
mailsnarf.8 | 4 3 + 1 - 0 !
mailsnarf.c | 28 22 + 6 - 0 !
msgsnarf.8 | 4 3 + 1 - 0 !
msgsnarf.c | 30 23 + 7 - 0 !
sshow.8 | 4 3 + 1 - 0 !
sshow.c | 30 23 + 7 - 0 !
urlsnarf.8 | 5 4 + 1 - 0 !
urlsnarf.c | 27 23 + 4 - 0 !
webspy.8 | 4 3 + 1 - 0 !
webspy.c | 15 12 + 3 - 0 !
14 files changed, 172 insertions(+), 47 deletions(-)

 allow the reading of saved pcap capture files.
Bug-Debian: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=153462
Bug-Debian: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=298604

04_multiple_intf.patch | (download)

arp.c | 6 3 + 3 - 0 !
arp.h | 2 1 + 1 - 0 !
arpspoof.c | 2 1 + 1 - 0 !
3 files changed, 5 insertions(+), 5 deletions(-)

 work with multiple interfaces.
Bug-Debian: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=242369

05_amd64_fix.patch | (download)

configure | 85 66 + 19 - 0 !
configure.in | 1 1 + 0 - 0 !
2 files changed, 67 insertions(+), 19 deletions(-)

 compile under amd64.
Bug-Debian: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=254002

06_urlsnarf_zeropad.patch | (download)

urlsnarf.c | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

 urlsnarf: zero-pad date.
Bug-Debian: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=298605

07_libnet_1.1.patch | (download)

arpspoof.c | 67 35 + 32 - 0 !
dnsspoof.c | 60 30 + 30 - 0 !
filesnarf.c | 6 3 + 3 - 0 !
macof.c | 55 28 + 27 - 0 !
record.c | 4 2 + 2 - 0 !
sshmitm.c | 2 1 + 1 - 0 !
tcp_raw.c | 4 2 + 2 - 0 !
tcp_raw.h | 2 1 + 1 - 0 !
tcpkill.c | 52 26 + 26 - 0 !
tcpnice.c | 99 50 + 49 - 0 !
trigger.c | 6 3 + 3 - 0 !
trigger.h | 6 3 + 3 - 0 !
urlsnarf.c | 4 2 + 2 - 0 !
webmitm.c | 4 2 + 2 - 0 !
webspy.c | 4 2 + 2 - 0 !
15 files changed, 190 insertions(+), 185 deletions(-)

 use libnet v1.1 instead of v1.0

08_openssl 0.9.8.patch | (download)

ssh.c | 1 1 + 0 - 0 !
1 file changed, 1 insertion(+)

 fix ftbfs with openssl.

09_sysconf_clocks.patch | (download)

sshow.c | 2 2 + 0 - 0 !
1 file changed, 2 insertions(+)

 fix ftbfs: ./sshow.c:226: error: 'clk_tck' undeclared.

10_urlsnarf_escape.patch | (download)

urlsnarf.c | 65 55 + 10 - 0 !
1 file changed, 55 insertions(+), 10 deletions(-)

 escape user, vhost, uri, referer, agent strings in log.
Bug-Debian: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=372536

11_string_header.patch | (download)

arp.c | 1 1 + 0 - 0 !
buf.c | 1 1 + 0 - 0 !
decode_nntp.c | 1 1 + 0 - 0 !
decode_pop.c | 1 1 + 0 - 0 !
decode_rlogin.c | 2 2 + 0 - 0 !
decode_smb.c | 1 1 + 0 - 0 !
decode_smtp.c | 1 1 + 0 - 0 !
decode_sniffer.c | 2 2 + 0 - 0 !
decode_socks.c | 1 1 + 0 - 0 !
decode_tds.c | 1 1 + 0 - 0 !
decode_telnet.c | 1 1 + 0 - 0 !
decode_x11.c | 2 2 + 0 - 0 !
dnsspoof.c | 1 1 + 0 - 0 !
magic.c | 1 1 + 0 - 0 !
missing/strlcat.h | 1 1 + 0 - 0 !
missing/strlcpy.h | 1 1 + 0 - 0 !
sshmitm.c | 1 1 + 0 - 0 !
17 files changed, 20 insertions(+)

 avoid the "implicit declaration of function 'str*'" warning

12_arpa_inet_header.patch | (download)

decode_aim.c | 1 1 + 0 - 0 !
decode_mmxp.c | 1 1 + 0 - 0 !
decode_pptp.c | 1 1 + 0 - 0 !
decode_tds.c | 1 1 + 0 - 0 !
decode_vrrp.c | 1 1 + 0 - 0 !
ssh.c | 1 1 + 0 - 0 !
6 files changed, 6 insertions(+)

 avoid the "implicit declaration of function 'ntohs'" warning

13_pop_with_version.patch | (download)

decode.c | 3 2 + 1 - 0 !
dsniff.services | 4 2 + 2 - 0 !
2 files changed, 4 insertions(+), 3 deletions(-)

 distinguish between pop versions

14_obsolete_time.patch | (download)

sshow.c | 6 3 + 3 - 0 !
1 file changed, 3 insertions(+), 3 deletions(-)

 according to /usr/include/time.h, clk_tck is the 
"obsolete POSIX.1-1988 name" for CLOCKS_PER_SEC.
Bug-Debian: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=420944

15_checksum_libnids.patch | (download)

dsniff.c | 76 76 + 0 - 0 !
1 file changed, 76 insertions(+)

 workaround to this debian bug
Bug-Debian: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=420129

16_TDS_decoder.patch | (download)

decode_tds.c | 5 5 + 0 - 0 !
1 file changed, 5 insertions(+)

 fix for dos y tds decoder. patch provided by hilko bengen.
Bug-Debian: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=609988

17_checksum.patch | (download)

urlsnarf.c | 7 7 + 0 - 0 !
1 file changed, 7 insertions(+)

 disable the filtering packets with incorrect checksum.
Bug-Debian: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=372536

18_sshcrypto.patch | (download)

sshcrypto.c | 2 2 + 0 - 0 !
1 file changed, 2 insertions(+)

 missing openssl  includes in sshcrypto.c. 
19_rewrite and modernize POP decoder.patch | (download)

decode_pop.c | 96 77 + 19 - 0 !
1 file changed, 77 insertions(+), 19 deletions(-)

 [patch] rewrite and modernize pop decoder


Signed-off-by: Stefan Tomanek <stefan@pico.ruhr.de>

20_debian_dirs.patch | (download)

Makefile.in | 5 2 + 3 - 0 !
dnsspoof.8 | 2 1 + 1 - 0 !
dsniff.8 | 4 2 + 2 - 0 !
pathnames.h | 2 1 + 1 - 0 !
4 files changed, 6 insertions(+), 7 deletions(-)

 adapt to debian directory structure.

21_msgsnarf_segfault.patch | (download)

msgsnarf.c | 1 1 + 0 - 0 !
1 file changed, 1 insertion(+)

 correctly 0 out the c struct.

22_handlepp.patch | (download)

pcaputil.c | 3 3 + 0 - 0 !
1 file changed, 3 insertions(+)

 add tcpkill support for handle ppp interfaces.

23_urlsnarf_timestamp.patch | (download)

urlsnarf.c | 51 47 + 4 - 0 !
1 file changed, 47 insertions(+), 4 deletions(-)

 urlsnarf: use timestamps from pcap file if available.
Bug-Debian: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=573365

24_Fix OpenSSL1.1.0 Build.patch | (download)

ssh.c | 62 34 + 28 - 0 !
sshcrypto.c | 14 11 + 3 - 0 !
2 files changed, 45 insertions(+), 31 deletions(-)

 fix build with openssl 1.1.0
25_fix spelling errors.patch | (download)

remote.c | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

 fix minor spelling error in source code
26_arpspoof add r switch to poison both directions.patch | (download)

arpspoof.8 | 5 4 + 1 - 0 !
arpspoof.c | 59 47 + 12 - 0 !
2 files changed, 51 insertions(+), 13 deletions(-)

 [patch 1/3] arpspoof: add -r switch to poison both directions


Signed-off-by: Stefan Tomanek <stefan@pico.ruhr.de>

27_arpspoof allow use of of multiple targets.patch | (download)

arpspoof.8 | 2 1 + 1 - 0 !
arpspoof.c | 106 72 + 34 - 0 !
2 files changed, 73 insertions(+), 35 deletions(-)

 [patch 2/3] arpspoof: allow use of multiple targets. last hunk modified by joão salavisa <joao.salavisa@gmail.com>
in order to fix a bug with "-t" option of arpspoof. See https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=706766 fo more information.
28_arpspoof allow selection of source hw address.patch | (download)

arpspoof.8 | 9 8 + 1 - 0 !
arpspoof.c | 90 64 + 26 - 0 !
2 files changed, 72 insertions(+), 27 deletions(-)

 [patch 3/3] arpspoof: allow selection of source hw address

In certain networks, sending with the wrong hardware source address can
jeopardize the network connection of the host running arpspoof. This
patch makes it possible to specify whether arpspoof should use the own
hardware address or the one of the real host when resetting the arp
table of the target systems; it is also possible to use both.

Signed-off-by: Stefan Tomanek <stefan@pico.ruhr.de>

29_libnet_name2addr4.patch | (download)

arpspoof.c | 6 6 + 0 - 0 !
sshmitm.c | 12 9 + 3 - 0 !
webmitm.c | 10 8 + 2 - 0 !
webspy.c | 7 6 + 1 - 0 !
4 files changed, 29 insertions(+), 6 deletions(-)

 fixes possible segmentation faults of arpspoof, sshmitm, webmitm and 
webspy if any non-resolving hostname is passed. Issue was introduced by 
dsniff-2.4-libnet_11.patch; libnet_name_resolve() was replaced by libnet_name2addr4() 
while there must be the structure libnet_t passed additionally. And if that structure is not initialized
using libnet_init() and the passed name can't be resolved (like "192.168.2."), it
causes a snprintf() to NULL and thus the segmentation fault. Note that macof isn't
affected as no resolving was involved here ever.
30_pntohl_shift.patch | (download)

decode.h | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

 corrects the incorrect bit-shift in pntohl(), the left-shift should be 8 bits, not 18.
31_sysconf_clocks.patch | (download)

sshow.c | 8 6 + 2 - 0 !
1 file changed, 6 insertions(+), 2 deletions(-)

 adds a clock fix. it was improved by robert scheck <robert@fedoraproject.org> 
to work with older Linux kernel versions, too.
32_rpc_segfault.patch | (download)

rpc.c | 3 3 + 0 - 0 !
1 file changed, 3 insertions(+)

 avoids xdrs being used without being initialised first. without this
patch dsniff segfaults when decoding RPC packets on x86_64.
33_sshcrypto_DES.patch | (download)

sshcrypto.c | 24 12 + 12 - 0 !
1 file changed, 12 insertions(+), 12 deletions(-)

 improves 18_sshcrypto.patch 
   - Replace all des_ methods and structs with DES_ equivalents.
   - Remove openssl/des_old.h include.
   - Register dependencies on OpenSSL, glib20 and gettext.
34_fix parallel FTBFS.patch | (download)

Makefile.in | 48 30 + 18 - 0 !
1 file changed, 30 insertions(+), 18 deletions(-)

 fix parallel ftbfs problems
 * Add libmissing.a as a dependency to each of the PROGS to ensure it is
   built before them.
 * Ensure mount.h is created before decode_mountd.o gets built.
 * Ensure nfs_prot.h is created before filesnarf.o gets built.
35_Add_CPPFLAGS.patch | (download)

Makefile.in | 10 6 + 4 - 0 !
1 file changed, 6 insertions(+), 4 deletions(-)

 import cppflags in order to build an elf binary that uses fortified libc functions. now it is built with all default debian compiler flags.
36_implicit_declarations.patch | (download)

filesnarf.c | 24 0 + 24 - 0 !
nfs_prot.x | 2 1 + 1 - 0 !
sshcrypto.c | 1 1 + 0 - 0 !
3 files changed, 2 insertions(+), 25 deletions(-)

 fix implicit declarations compiler warning
 * switch to C99 uint64_t, remove now unnecessary xdr_u_int64_t function
 * include missing string.h for memset