aboutsummaryrefslogtreecommitdiff
path: root/ports-mgmt/portaudit-db/database/portaudit.xml
diff options
context:
space:
mode:
authorOliver Eikemeier <eik@FreeBSD.org>2004-08-15 17:22:09 +0000
committerOliver Eikemeier <eik@FreeBSD.org>2004-08-15 17:22:09 +0000
commit137b94aa13c42d998595c466f5ec49daf16573bb (patch)
treee4e817dc084b76c9e2a45b3b63860956aff9398e /ports-mgmt/portaudit-db/database/portaudit.xml
parent6383638610ed949b10418d807f6994a306dc95f4 (diff)
downloadports-137b94aa13c42d998595c466f5ec49daf16573bb.tar.gz
ports-137b94aa13c42d998595c466f5ec49daf16573bb.zip
Notes
Diffstat (limited to 'ports-mgmt/portaudit-db/database/portaudit.xml')
-rw-r--r--ports-mgmt/portaudit-db/database/portaudit.xml27
1 files changed, 27 insertions, 0 deletions
diff --git a/ports-mgmt/portaudit-db/database/portaudit.xml b/ports-mgmt/portaudit-db/database/portaudit.xml
index 9a35be7de91a..d180a376dde3 100644
--- a/ports-mgmt/portaudit-db/database/portaudit.xml
+++ b/ports-mgmt/portaudit-db/database/portaudit.xml
@@ -776,4 +776,31 @@ This file is in the public domain.
<modified>2004-08-12</modified>
</dates>
</vuln>
+
+ <vuln vid="65a17a3f-ed6e-11d8-aff1-00061bc2ad93">
+ <topic>jftpgw remote syslog format string vulnerability</topic>
+ <affects>
+ <package>
+ <name>jftpgw</name>
+ <range><lt>0.13.5</lt></range>
+ </package>
+ </affects>
+ <description>
+ <body xmlns="http://www.w3.org/1999/xhtml">
+ <p>Remote authenticated users can execute arbitrary code by
+ passing a malicious string containing format specifiers.</p>
+ </body>
+ </description>
+ <references>
+ <cvename>CAN-2004-0448</cvename>
+ <bid>10438</bid>
+ <url>http://secunia.com/advisories/11732</url>
+ <url>http://www.debian.org/security/2004/dsa-510</url>
+ </references>
+ <dates>
+ <discovery>2004-05-29</discovery>
+ <entry>2004-08-13</entry>
+ </dates>
+ </vuln>
+
</vuxml>