diff options
| author | Jacques Vidrine <nectar@FreeBSD.org> | 2004-08-26 21:12:28 +0000 |
|---|---|---|
| committer | Jacques Vidrine <nectar@FreeBSD.org> | 2004-08-26 21:12:28 +0000 |
| commit | 40c28912b1ca2d3af1c4bfa5d2ec6c2bbdf76572 (patch) | |
| tree | 2842b47e9b67cf5ea47a6735df0d75af582ee9e4 /security/vuxml/vuln.xml | |
| parent | c57e57ac316d6d8259409d9a937d61d895e169aa (diff) | |
Notes
Diffstat (limited to 'security/vuxml/vuln.xml')
| -rw-r--r-- | security/vuxml/vuln.xml | 38 |
1 files changed, 38 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 04c80be82d16..291dfa6678d1 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -32,6 +32,44 @@ EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="7884d56f-f7a1-11d8-9837-000c41e2cdad"> + <topic>gnomevfs --- unsafe URI handling</topic> + <affects> + <package> + <name>gnomevfs2</name> + <range><le>2.6.2</le></range> + </package> + <package> + <name>gnomevfs</name> + <range><le>1.0.5_5</le></range> + </package> + <package> + <name>mc</name> + <range><le>4.6.0_12</le></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>Alexander Larsson reports that some versions of gnome-vfs and + MidnightCommander contain a number of `extfs' scripts that do not + properly validate user input. If an attacker can cause her + victim to process a specially-crafted URI, arbitrary commands + can be executed with the privileges of the victim.</p> + </body> + </description> + <references> + <cvename>CAN-2004-0494</cvename> + <bid>10864</bid> + <url>http://www.ciac.org/ciac/bulletins/o-194.shtml</url> + <url>http://xforce.iss.net/xforce/xfdb/16897</url> + <url>https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=127263</url> + </references> + <dates> + <discovery>2004-08-04</discovery> + <entry>2004-08-26</entry> + </dates> + </vuln> + <vuln vid="3e4ffe76-e0d4-11d8-9b0a-000347a4fa7d"> <topic>SoX buffer overflows when handling .WAV files</topic> <affects> |