diff options
| author | Remko Lodder <remko@FreeBSD.org> | 2005-04-19 11:14:23 +0000 |
|---|---|---|
| committer | Remko Lodder <remko@FreeBSD.org> | 2005-04-19 11:14:23 +0000 |
| commit | aab5979e99ea485715695b8f7d38ba8cbdd96ec7 (patch) | |
| tree | 66cf995753083b10474dcf4a48ebf478e1bfb627 /security/vuxml/vuln.xml | |
| parent | bab0e1df29550f358c951f9399c93c9089c855e9 (diff) | |
| download | ports-aab5979e99ea485715695b8f7d38ba8cbdd96ec7.tar.gz ports-aab5979e99ea485715695b8f7d38ba8cbdd96ec7.zip | |
Notes
Diffstat (limited to 'security/vuxml/vuln.xml')
| -rw-r--r-- | security/vuxml/vuln.xml | 37 |
1 files changed, 37 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 446c6af45860..2681f63ed9e8 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -32,6 +32,43 @@ EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="6c2d4f29-af3e-11d9-837d-000e0c2e438a"> + <topic>gld -- format string and buffer overflow vulnerabilities</topic> + <affects> + <package> + <name>gld</name> + <range><lt>1.5</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>Gld has been found vulnerable to multiple buffer overflows as + well as multiple format string vulnerabilities.</p> + <blockquote cite="http://marc.theaimsgroup.com/?l=bugtraq&m=111339935903880"> + <p>An attacker could exploit this vulnerability to execute + arbitrary code with the permissions of the user running Gld, + the default user being root.</p> + </blockquote> + <p>The FreeBSD port defaults to running gld as the root user. + The risk of exploitation can be minimized by making gld + listen on the loopback address only, or configure it to only + accept connections from trusted smtp servers.</p> + </body> + </description> + <references> + <bid>13129</bid> + <bid>13133</bid> + <cvename>CAN-2005-1099</cvename> + <cvename>CAN-2005-1100</cvename> + <mlist msgid="20050412004111.562AC7A890E@ws4-4.us4.outblaze.com">http://marc.theaimsgroup.com/?l=bugtraq&m=111339935903880</mlist> + <mlist msgid="20050413174736.20947.qmail@www.securityfocus.com">http://marc.theaimsgroup.com/?l=bugtraq&m=111342432325670</mlist> + </references> + <dates> + <discovery>2005-04-12</discovery> + <entry>2005-04-19</entry> + </dates> + </vuln> + <vuln vid="0163b498-af54-11d9-acd0-000854d03344"> <topic>axel -- remote buffer overflow</topic> <affects> |