Ncat segmentation fault with --ssl and --chat

[Thomas Heßling <mail () dream-dimensions de>]

Hello,

I just tried the new 5.00 release of Nmap and noticed a segmentation
fault in the Ncat tool. Searching for this revealed nothing so I am
writing to this list. It appears when I combine the --ssl and --chat
option like follows:

$ ncat --listen --ssl --chat localhost 10000

I can connect multiple times and chat but as soon as one client
disconnects the others receive endless amounts of text like this:

<user4> <user4> <user4> <user4> <user4> <user4> <user4> <user4> <user4>
<user4> <user4> <user4> <user4> <user4> <user4> <user4> <user4> <user4>

If any new connection to the listener is created Ncat exits with a
segmentation fault. This does not happen if I omit the --ssl option and
this also does not happen if I simulate the chat with:

$ ncat --listen --ssl --broker localhost 10000

I tested this on an Ubuntu9.04-amd64 system with kernel 2.6.28 and
libssl0.9.8g. If there's any more information you need let me know.


Regards,
Thomas

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org