diff options
| author | nectar <nectar@FreeBSD.org> | 2004-08-23 06:39:32 +0800 |
|---|---|---|
| committer | nectar <nectar@FreeBSD.org> | 2004-08-23 06:39:32 +0800 |
| commit | 4625de02f7e7d5bb129f5a2678e8902ebc365061 (patch) | |
| tree | b20b13b83a2a067bfbc9e86a82f46014dd028f95 /security/vuxml | |
| parent | bef478a3a7492f2f5e58acfa835c4b36ef7209d8 (diff) | |
| download | freebsd-ports-gnome-4625de02f7e7d5bb129f5a2678e8902ebc365061.tar.gz freebsd-ports-gnome-4625de02f7e7d5bb129f5a2678e8902ebc365061.tar.zst freebsd-ports-gnome-4625de02f7e7d5bb129f5a2678e8902ebc365061.zip | |
Add a security issue affected courier-imap when run with certain debug
flags.
Diffstat (limited to 'security/vuxml')
| -rw-r--r-- | security/vuxml/vuln.xml | 26 |
1 files changed, 26 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 5b82c6d77743..4bfe5ff288d5 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -32,6 +32,32 @@ EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="616cf823-f48b-11d8-9837-000c41e2cdad"> + <topic>courier-imap -- format string vulnerability in debug mode</topic> + <affects> + <package> + <name>courier-imap</name> + <range><le>3.0.7,1</le></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>An iDEFENSE security advisory describes a format string + vulnerability that could be exploited when Courier-IMAP is run + in debug mode (DEBUG_LOGIN set).</p> + </body> + </description> + <references> + <cvename>CAN-2004-0777</cvename> + <url>http://lists.netsys.com/pipermail/full-disclosure/2004-August/025478.html</url> + <url>http://www.idefense.com/application/poi/display?id=131&type=vulnerabilities&flashstatus=false</url> + </references> + <dates> + <discovery>2004-08-18</discovery> + <entry>2004-08-22</entry> + </dates> + </vuln> + <vuln vid="3243e839-f489-11d8-9837-000c41e2cdad"> <topic>fidogate -- write files as `news' user</topic> <affects> |