diff options
| author | Jacques Vidrine <nectar@FreeBSD.org> | 2004-11-12 15:01:57 +0000 |
|---|---|---|
| committer | Jacques Vidrine <nectar@FreeBSD.org> | 2004-11-12 15:01:57 +0000 |
| commit | 85398c89229bf6084a11b29999fb79572cb1f5de (patch) | |
| tree | dcb41b6c4804701ebcd087f9f6af81eade2f60cc /security/vuxml/vuln.xml | |
| parent | 90637316bfc60feb68a20168d6db3caa37442fb7 (diff) | |
| download | ports-85398c89229bf6084a11b29999fb79572cb1f5de.tar.gz ports-85398c89229bf6084a11b29999fb79572cb1f5de.zip | |
Notes
Diffstat (limited to 'security/vuxml/vuln.xml')
| -rw-r--r-- | security/vuxml/vuln.xml | 33 |
1 files changed, 33 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 9664a1e99c95..92179349ba2d 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -32,6 +32,39 @@ EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="ba13dc13-340d-11d9-ac1b-000d614f7fad"> + <topic>samba -- potential remote DoS vulnerability</topic> + <affects> + <package> + <name>samba</name> + <range><ge>3</ge><lt>3.0.8,1</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>Karol Wiesek at iDEFENSE reports:</p> + <blockquote cite="http://us4.samba.org/samba/security/CAN-2004-0930.html"> + <p>A remote attacker could cause an smbd process to consume + abnormal amounts of system resources due to an input + validation error when matching filenames containing + wildcard characters.</p> + </blockquote> + <p>Although samba.org classifies this as a DoS vulnerability, + several members of the security community believe it may be + exploitable for arbitrary code execution.</p> + </body> + </description> + <references> + <freebsdpr>ports/73701</freebsdpr> + <cvename>CAN-2004-0930</cvename> + <url>http://us4.samba.org/samba/security/CAN-2004-0930.html</url> + </references> + <dates> + <discovery>2004-09-30</discovery> + <entry>2004-11-12</entry> + </dates> + </vuln> + <vuln vid="fc99c736-3499-11d9-98a7-0090962cff2a"> <topic>gnats4 -- format string vulnerability</topic> <affects> |