diff options
| author | Remko Lodder <remko@FreeBSD.org> | 2006-04-23 14:14:52 +0000 |
|---|---|---|
| committer | Remko Lodder <remko@FreeBSD.org> | 2006-04-23 14:14:52 +0000 |
| commit | b2c8757b201727afc54e16042d606cd05c8a427d (patch) | |
| tree | dad784d980932a3d29af4699892be89a37d5d133 /security/vuxml/vuln.xml | |
| parent | 14c79b22a863288f5d0c9fdba1f3e0bc18968f33 (diff) | |
| download | ports-b2c8757b201727afc54e16042d606cd05c8a427d.tar.gz ports-b2c8757b201727afc54e16042d606cd05c8a427d.zip | |
Notes
Diffstat (limited to 'security/vuxml/vuln.xml')
| -rw-r--r-- | security/vuxml/vuln.xml | 34 |
1 files changed, 34 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 308913428eb9..176ebaf4eee8 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -34,6 +34,40 @@ Note: Please add new entries to the beginning of this file. --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="86cc5c6f-d2b4-11da-a672-000e0c2e438a"> + <topic>crossfire-server -- denial of service and remote code + execution vulnerability</topic> + <affects> + <package> + <name>crossfire-server</name> + <range><lt>1.9.0</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>FRSIRT reports:</p> + <blockquote cite="http://www.frsirt.com/english/advisories/2006/0760"> + <p>A vulnerability has been identified in CrossFire, which + could be exploited by remote attackers to execute arbitrary + commands or cause a denial of service. This flaw is due to + a buffer overflow error in the "oldsocketmode" module that + fails to properly handle overly large requests, which could + be exploited by a malicious client to crash or compromise a + vulnerable system.</p> + </blockquote> + </body> + </description> + <references> + <bid>16883</bid> + <cvename>CVE-2006-1010</cvename> + <url>http://www.frsirt.com/english/advisories/2006/0760</url> + </references> + <dates> + <discovery>2006-02-28</discovery> + <entry>2006-04-23</entry> + </dates> + </vuln> + <vuln vid="8cfb6f42-d2b0-11da-a672-000e0c2e438a"> <topic>p5-DBI -- insecure temporary file creation vulnerability</topic> |