diff options
| author | remko <remko@FreeBSD.org> | 2006-02-16 17:08:03 +0800 |
|---|---|---|
| committer | remko <remko@FreeBSD.org> | 2006-02-16 17:08:03 +0800 |
| commit | 07118c28fb90462583e9c8ebc478d602fab492dc (patch) | |
| tree | 91119b6a6e10a71456ce55d9312b28ae0e590cc3 /security | |
| parent | 5d3657c270b5575280cf99c0ec28b135bb892a63 (diff) | |
| download | freebsd-ports-gnome-07118c28fb90462583e9c8ebc478d602fab492dc.tar.gz freebsd-ports-gnome-07118c28fb90462583e9c8ebc478d602fab492dc.tar.zst freebsd-ports-gnome-07118c28fb90462583e9c8ebc478d602fab492dc.zip | |
Document heartbeat -- insecure temporary file creation vulnerability.
Diffstat (limited to 'security')
| -rw-r--r-- | security/vuxml/vuln.xml | 28 |
1 files changed, 28 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 2f118949c1bb..77383920acde 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -34,6 +34,34 @@ Note: Please add new entries to the beginning of this file. --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="f6447303-9ec9-11da-b410-000e0c2e438a"> + <topic>heartbeat -- insecure temporary file creation vulnerability</topic> + <affects> + <package> + <name>heartbeat</name> + <range><ge>0</ge></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>Eric Romang reports a temporary file creation vulnerability + within heartbeat. The vulnerability is caused by hardcoded + temporary file usage. This can cause an attacker to create + an arbitrary symlink causing the application to overwrite the + symlinked file with the permissions of the user executing the + application.</p> + </body> + </description> + <references> + <cvename>CAN-2005-2231</cvename> + <url>http://www.zataz.net/adviso/heartbeat-06272005.txt</url> + </references> + <dates> + <discovery>2005-07-12</discovery> + <entry>2006-02-16</entry> + </dates> + </vuln> + <vuln vid="432bf98d-9e25-11da-b410-000e0c2e438a"> <topic>kpdf -- heap based buffer overflow</topic> <affects> |