aboutsummaryrefslogtreecommitdiff
path: root/security
diff options
context:
space:
mode:
authorAlex Kozlov <ak@FreeBSD.org>2021-09-30 02:02:47 +0000
committerAlex Kozlov <ak@FreeBSD.org>2021-09-30 02:02:47 +0000
commit74b07528d3937bc3c267c0bbb55abda453c51665 (patch)
tree197259ff1bd7a88967ea40bd4adec1e67e82fce9 /security
parent36d73f4cab3718caa6efa74c223ab9392b2035e2 (diff)
downloadports-74b07528d3937bc3c267c0bbb55abda453c51665.tar.gz
ports-74b07528d3937bc3c267c0bbb55abda453c51665.zip
security/vuxml: document archivers/ha vulnerabilities
Diffstat (limited to 'security')
-rw-r--r--security/vuxml/vuln-2021.xml27
1 files changed, 27 insertions, 0 deletions
diff --git a/security/vuxml/vuln-2021.xml b/security/vuxml/vuln-2021.xml
index fe47555b461f..76690fae5142 100644
--- a/security/vuxml/vuln-2021.xml
+++ b/security/vuxml/vuln-2021.xml
@@ -1,3 +1,30 @@
+ <vuln vid="5436f9a2-2190-11ec-a90b-0cc47a49470e">
+ <topic>ha -- Directory traversals</topic>
+ <affects>
+ <package>
+ <name>ha</name>
+ <range><lt>0.999b_2</lt></range>
+ </package>
+ </affects>
+ <description>
+ <body xmlns="http://www.w3.org/1999/xhtml">
+ <p>Alexander Cherepanov reports:</p>
+ <blockquote cite="http://www.openwall.com/lists/oss-security/2015/01/18/8">
+ <p>Version 0.999b and older of ha archiver is susceptible to directory
+ traversal vulnerabilities via absolute and relative paths.</p>
+ </blockquote>
+ </body>
+ </description>
+ <references>
+ <cvename>CVE-2015-1198</cvename>
+ <url>http://www.openwall.com/lists/oss-security/2015/01/18/8</url>
+ </references>
+ <dates>
+ <discovery>2015-01-18</discovery>
+ <entry>2021-09-30</entry>
+ </dates>
+ </vuln>
+
<vuln vid="730e922f-20e7-11ec-a574-080027eedc6a">
<topic>nexus2-oss -- Apache ActiveMQ JMX vulnerability</topic>
<affects>