aboutsummaryrefslogtreecommitdiffstats
path: root/security
diff options
context:
space:
mode:
authornectar <nectar@FreeBSD.org>2004-03-26 02:13:59 +0800
committernectar <nectar@FreeBSD.org>2004-03-26 02:13:59 +0800
commitbb9dc3d987b1ca6b58bddd11010ae96ef8a528ff (patch)
treee66c4642db21039f95dadef945e58a75e63e240b /security
parent81fef550c502e1d26478c9f75fb24d5ab7d5835e (diff)
downloadfreebsd-ports-gnome-bb9dc3d987b1ca6b58bddd11010ae96ef8a528ff.tar.gz
freebsd-ports-gnome-bb9dc3d987b1ca6b58bddd11010ae96ef8a528ff.tar.zst
freebsd-ports-gnome-bb9dc3d987b1ca6b58bddd11010ae96ef8a528ff.zip
Add xdeview to existing UUDecode issue
Add racoon SA deletion issue.
Diffstat (limited to 'security')
-rw-r--r--security/vuxml/vuln.xml28
1 files changed, 28 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml
index ae0aaca1929f..653fbc158301 100644
--- a/security/vuxml/vuln.xml
+++ b/security/vuxml/vuln.xml
@@ -32,12 +32,39 @@ EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
"http://www.vuxml.org/dtd/vuxml-1/vuxml-10.dtd">
<vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
+ <vuln vid="739bb51d-7e82-11d8-9645-0020ed76ef5a">
+ <topic>racoon security association deletion vulnerability</topic>
+ <affects>
+ <package>
+ <name>racoon</name>
+ <range><lt>20040116a</lt></range>
+ </package>
+ </affects>
+ <description>
+ <body xmlns="http://www.w3.org/1999/xhtml">
+ <p>A remote attacker may use specially crafted IKE/ISAKMP
+ messages to cause racoon to delete security associations.
+ This could result in denial-of-service or possibly cause
+ sensitive traffic to be transmitted in plaintext, depending
+ upon configuration.</p>
+ </body>
+ </description>
+ <references>
+ <url>http://marc.theaimsgroup.com/?l=bugtraq&amp;m=107403331309838</url>
+ </references>
+ <dates>
+ <discovery>2004-01-13</discovery>
+ <entry>2004-03-25</entry>
+ </dates>
+ </vuln>
+
<vuln vid="6c7661ff-7912-11d8-9645-0020ed76ef5a">
<topic>uudeview buffer overflows</topic>
<affects>
<package>
<name>uulib</name>
<name>uudeview</name>
+ <name>xdeview</name>
<range><lt>0.5.20</lt></range>
</package>
</affects>
@@ -53,6 +80,7 @@ EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
<dates>
<discovery>2004-03-01</discovery>
<entry>2004-03-18</entry>
+ <modified>2004-03-25</modified>
</dates>
</vuln>