diff options
| author | Martin Wilke <miwi@FreeBSD.org> | 2009-03-18 15:05:03 +0000 |
|---|---|---|
| committer | Martin Wilke <miwi@FreeBSD.org> | 2009-03-18 15:05:03 +0000 |
| commit | a411f5c95b21bb7a4dda46f0c9ca251e980e3f6a (patch) | |
| tree | 07093a9f343f5f79850bbf69c3599c99800d9022 /security/vuxml | |
| parent | a3e99fe7abf2a57a2b1fdd4a4eec9846e35f312e (diff) | |
| download | ports-a411f5c95b21bb7a4dda46f0c9ca251e980e3f6a.tar.gz ports-a411f5c95b21bb7a4dda46f0c9ca251e980e3f6a.zip | |
Notes
Diffstat (limited to 'security/vuxml')
| -rw-r--r-- | security/vuxml/vuln.xml | 33 |
1 files changed, 33 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index fd7433da6bb0..6805d04aa19f 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -34,6 +34,39 @@ Note: Please add new entries to the beginning of this file. --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="72cba7b0-13cd-11de-a964-0030843d3802"> + <topic>netatalk -- arbitrary command execution in papd daemon</topic> + <affects> + <package> + <name>netatalk</name> + <range><lt>2.0.3_5,1</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>Secunia reports:</p> + <blockquote cite="http://secunia.com/advisories/33227"> + <p>A vulnerability has been reported in Netatalk, which potentially + can be exploited by malicious users to compromise a vulnerable system.</p> + <p>The vulnerability is caused due to the papd daemon improperly + sanitising several received parameters before passing them in a call + to "popen()". This can be exploited to execute arbitrary commands via + a specially crafted printing request.</p> + <p>Successful exploitation requires that a printer is configured to + pass arbitrary values as parameters to a piped command.</p> + </blockquote> + </body> + </description> + <references> + <cvename>CVE-2008-5718</cvename> + <url>http://secunia.com/advisories/33227</url> + </references> + <dates> + <discovery>2008-12-19</discovery> + <entry>2009-03-18</entry> + </dates> + </vuln> + <vuln vid="37a365ed-1269-11de-a964-0030843d3802"> <topic>gstreamer-plugins-good -- multiple memory overflows</topic> <affects> |