diff options
| author | simon <simon@FreeBSD.org> | 2005-03-15 04:19:29 +0800 |
|---|---|---|
| committer | simon <simon@FreeBSD.org> | 2005-03-15 04:19:29 +0800 |
| commit | f7c6bb03fcbfd21aef69d64d350f70d0de1fcfff (patch) | |
| tree | 671cc8c4aa51cb35ae0d316c4e3ae58f2261f3e8 /security/vuxml | |
| parent | 236d719b983fedd6e423ba5b0a0f866e5b38c139 (diff) | |
| download | freebsd-ports-gnome-f7c6bb03fcbfd21aef69d64d350f70d0de1fcfff.tar.gz freebsd-ports-gnome-f7c6bb03fcbfd21aef69d64d350f70d0de1fcfff.tar.zst freebsd-ports-gnome-f7c6bb03fcbfd21aef69d64d350f70d0de1fcfff.zip | |
Document "grip -- CDDB response multiple matches buffer overflow
vulnerability".
Diffstat (limited to 'security/vuxml')
| -rw-r--r-- | security/vuxml/vuln.xml | 29 |
1 files changed, 29 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index c162efd4c13a..7900eae3ceea 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -32,6 +32,35 @@ EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="bcf27002-94c3-11d9-a9e0-0001020eed82"> + <topic>grip -- CDDB response multiple matches buffer overflow + vulnerability</topic> + <affects> + <package> + <name>grip</name> + <range><gt>0</gt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>Joseph VanAndel reports that grip is vulnerability to a + buffer overflow vulnerability when receiving more than 16 + CDDB responses. This could lead to a crash in grip and + potentially execution arbitrary code.</p> + <p>A workaround is to disable CDDB lookups.</p> + </body> + </description> + <references> + <bid>12770</bid> + <cvename>CAN-2005-0706</cvename> + <url>http://sourceforge.net/tracker/index.php?func=detail&aid=834724&group_id=3714&atid=103714</url> + </references> + <dates> + <discovery>2003-11-02</discovery> + <entry>2005-03-14</entry> + </dates> + </vuln> + <vuln vid="619ef337-949a-11d9-b813-00d05964249f"> <topic>mysql-server -- multiple remote vulnerabilities</topic> <affects> |