aboutsummaryrefslogtreecommitdiff
path: root/security
diff options
context:
space:
mode:
authorMartin Wilke <miwi@FreeBSD.org>2009-05-30 20:07:42 +0000
committerMartin Wilke <miwi@FreeBSD.org>2009-05-30 20:07:42 +0000
commit814f13077ddc5aa7fc6523e9e1b16a215304add1 (patch)
treee51a75da1a66c1de166dd1cbb562e984e61ef2d6 /security
parent0cbfdbee46004362a104238baa166134d7f6b06a (diff)
downloadports-814f13077ddc5aa7fc6523e9e1b16a215304add1.tar.gz
ports-814f13077ddc5aa7fc6523e9e1b16a215304add1.zip
Notes
Diffstat (limited to 'security')
-rw-r--r--security/vuxml/vuln.xml35
1 files changed, 35 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml
index 667e86b9ea16..e75e52ce74e9 100644
--- a/security/vuxml/vuln.xml
+++ b/security/vuxml/vuln.xml
@@ -34,6 +34,41 @@ Note: Please add new entries to the beginning of this file.
-->
<vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
+ <vuln vid="a2d4a330-4d54-11de-8811-0030843d3802">
+ <topic>wireshark -- PCNFSD Dissector Denial of Service Vulnerability</topic>
+ <affects>
+ <package>
+ <name>ethereal</name>
+ <name>ethereal-lite</name>
+ <name>tethereal</name>
+ <name>tethereal-lite</name>
+ <name>wireshark</name>
+ <name>wireshark-lite</name>
+ <range><lt>1.0.8</lt></range>
+ </package>
+ </affects>
+ <description>
+ <body xmlns="http://www.w3.org/1999/xhtml">
+ <p>secunia reports:</p>
+ <blockquote cite="http://secunia.com/advisories/35201/">
+ <p>A vulnerability has been reported in Wireshark, which can be
+ exploited by malicious people to cause a DoS.</p>
+ <p>The vulnerability is caused due to an error in the PCNFSD dissector
+ and can be exploited to cause a crash via a specially crafted PCNFSD
+ packet.</p>
+ </blockquote>
+ </body>
+ </description>
+ <references>
+ <url>http://secunia.com/advisories/35201/</url>
+ <url>http://www.wireshark.org/security/wnpa-sec-2009-03.html</url>
+ </references>
+ <dates>
+ <discovery>2009-05-21</discovery>
+ <entry>2009-05-30</entry>
+ </dates>
+ </vuln>
+
<vuln vid="6355efdb-4d4d-11de-8811-0030843d3802">
<topic>libsndfile -- multiple vulnerabilities</topic>
<affects>