diff options
| author | Simon L. B. Nielsen <simon@FreeBSD.org> | 2006-10-29 19:07:08 +0000 |
|---|---|---|
| committer | Simon L. B. Nielsen <simon@FreeBSD.org> | 2006-10-29 19:07:08 +0000 |
| commit | 11ce17521a5f9d94bbfc36d3c29c6c9086cfd123 (patch) | |
| tree | 5fa354df84ecc1bfb73de1d61289c98160fce8d9 | |
| parent | 04ee71b7ac5b966c1e3a74811e92bebe3e84adfe (diff) | |
| download | ports-11ce17521a5f9d94bbfc36d3c29c6c9086cfd123.tar.gz ports-11ce17521a5f9d94bbfc36d3c29c6c9086cfd123.zip | |
Notes
| -rw-r--r-- | security/vuxml/vuln.xml | 29 |
1 files changed, 29 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 2455c6fdae62..820cdd29c458 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -34,6 +34,35 @@ Note: Please add new entries to the beginning of this file. --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="b318dc8c-6756-11db-83c3-000c6ec775d9"> + <topic>screen -- combined UTF-8 characters vulnerability</topic> + <affects> + <package> + <name>screen</name> + <range><lt>4.0.3</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>A vulnerability in the handling handling of combined UTF-8 + characters in screen may allow an user-assisted attacker to + crash screen or potentially allow code execution as the user + running screen. To exploit this issue the user running + scren must in some way interact with the attacker.</p> + </body> + </description> + <references> + <bid>20727</bid> + <cvename>CVE-2006-4573</cvename> + <mlist>http://lists.gnu.org/archive/html/screen-users/2006-10/msg00028.html</mlist> + <url>https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=212056</url> + </references> + <dates> + <discovery>2006-10-23</discovery> + <entry>2006-10-29</entry> + </dates> + </vuln> + <vuln vid="a9c51caf-6603-11db-ab90-000e35fd8194"> <topic>mysql -- database suid privilege escalation</topic> <affects> |