diff options
| author | miwi <miwi@FreeBSD.org> | 2007-07-29 19:29:45 +0800 |
|---|---|---|
| committer | miwi <miwi@FreeBSD.org> | 2007-07-29 19:29:45 +0800 |
| commit | 4abbb7b87d2d94b0e67b09a12167fc7aed15f03c (patch) | |
| tree | fc96e58c743e14fca6f487072711a0ad90b995c5 /security | |
| parent | 649c992055e8eeb0e28176052f374dcb9402c6a4 (diff) | |
| download | freebsd-ports-gnome-4abbb7b87d2d94b0e67b09a12167fc7aed15f03c.tar.gz freebsd-ports-gnome-4abbb7b87d2d94b0e67b09a12167fc7aed15f03c.tar.zst freebsd-ports-gnome-4abbb7b87d2d94b0e67b09a12167fc7aed15f03c.zip | |
- Document p5-Net-DNS -- multiple Vulnerabilities
Reviewed by: remko
Diffstat (limited to 'security')
| -rw-r--r-- | security/vuxml/vuln.xml | 34 |
1 files changed, 34 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 5d7705f73690..1f3193c794f2 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -34,6 +34,40 @@ Note: Please add new entries to the beginning of this file. --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="d2b8a963-3d59-11dc-b3d3-0016179b2dd5"> + <topic>p5-Net-DNS -- multiple Vulnerabilities</topic> + <affects> + <package> + <name>p5-Net-DNS</name> + <range><lt>0.60</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>A Secunia Advisory reports:</p> + <blockquote cite="http://secunia.com/advisories/25829/"> + <p>An error exists in the handling of DNS queries where IDs are + incremented with a fixed value and are additionally used for + child processes in a forking server. This can be exploited to + poison the DNS cache of an application using the module if a + valid ID is guessed.</p> + <p>An error in the PP implementation within the "dn_expand()" + function can be exploited to cause a stack overflow due to an + endless loop via a specially crafted DNS packet.</p> + </blockquote> + </body> + </description> + <references> + <cvename>CVE-2007-3377</cvename> + <cvename>CVE-2007-3409</cvename> + <url>http://secunia.com/advisories/25829/</url> + </references> + <dates> + <discovery>2007-06-27</discovery> + <entry>2007-07-28</entry> + </dates> + </vuln> + <vuln vid="88260dfe-3d21-11dc-b3d3-0016179b2dd5"> <topic>phpsysinfo -- url Cross-Site Scripting</topic> <affects> |