A cross site scripting vulnerabilty was found in the ipcalc CGI wrapper
script. (Note: This is not the ipcalc script itself, it is only used
when ipcalc is run via a web interface).
This script was included in the tar archives of ipcalc 0.39 and 0.40.
ok zuntum@
around at either build-time or at run-time is:
USE_TOOLS+= perl # build-time
USE_TOOLS+= perl:run # run-time
Also remove some places where perl5/buildlink3.mk was being included
by a package Makefile, but all that the package wanted was the Perl
executable.
Approved by zuntum@
Changes since last packaged version (0.35):
0.35a ??? [Never released] Fixed broken HTML: missing </font> tags.
Thanks to Torgen Foertsch
0.35.1 Repairing HTML
0.35.2 Again repair HTML. Thanks to Lars Mueller.
0.36-pre1
+ getopts
+ split_network
+ deaggregate
+ rename dqtobin bintodq
+ netblocks
+ accept hex netmasks (contribution)
+ remove garbage
+ rework argument handling
+ work all the time on integers, not machine type representations (pack)
+ eliminated unnessessary globals
+ replaced is_valid...
+ rewrote format_bin
+ various changes
+ applied fix for colorchange in format_bin scott baker
0.36-pre3
removed print_netmask
sticked formatbin and printline together to printline
(this marks new bits in supernets (former version didn't)
use label to decide what sfx to print
0.36-pre4
made subnets supernets
split / deaggregate work with new parameters
removed old functions
how to handle /31 and /32?
0.36-pre5
removed debug output in deaggregate
0.36-pre6
started netblocks
rework getclass
0.36
/31
2004
0.37-pre5
+handle /31 /32
+new html
+wrap_html
+GPL Header
0.37 2004-05-14 debian asked for a bug fix in 0.35
0.38 2004-10-08 ipcalc did not work on 64bit architectures.
Thanks to Foxfair Hu <foxfair(a)FreeBSD.org> for finding this bug
0.39 2005-07-07 Added output of class only option (-c --class), that was accidentally
removed in 0.36
Changed console color of bits back from white to yellow. (Requested by Oliver Seufer)
Added ipcalc.cgi and images to the package
Added license file to the package
Added license text in cgi-wrapper
Added contributors file to the package
0.40 2005-07-07 Make -c really do what it did before. (Giving the "natural" mask). Thanks
to Bartosz Fenski.
Include style sheet into ipcalc.cgi
DIST_SUBDIR to ${PKGNAME}.
Pointed out by Thomas Klausner <wiz@netbsd.org>, thanks!
PKGREVISION hasn't been bumped as the window between changes is reasonably
slow (about 20 minutes)
Changes:
# 0.35 12/2/2001 Fixed big-endian bug in subnets(). This was reported
# by Igor Zozulya and Steve Kent. Thank you for your help
# and access to your sparc machine!
Fixes pkg/15576, though in a different way than suggested by originator
(distfile has been put into MASTER_SITE_LOCAL, so distinfo will never get
broken again)
ipcalc takes an IP address and netmask and calculates the resulting broadcast,
network, Cisco wildcard mask, and host range. By giving a second netmask, you
can design sub- and supernetworks. It is also intended to be a teaching tool
and presents the results as easy-to-understand binary values.
