diff options
| author | remko <remko@FreeBSD.org> | 2005-04-19 19:14:23 +0800 |
|---|---|---|
| committer | remko <remko@FreeBSD.org> | 2005-04-19 19:14:23 +0800 |
| commit | 5d106efb4223d304276163b865d2ebaa7574db25 (patch) | |
| tree | f1f623b5d46138b16bc1f5eb3cb43e572c00dee2 /security | |
| parent | b3bfeac2136c7262edb7fb0ddf59cd828acc1029 (diff) | |
| download | freebsd-ports-gnome-5d106efb4223d304276163b865d2ebaa7574db25.tar.gz freebsd-ports-gnome-5d106efb4223d304276163b865d2ebaa7574db25.tar.zst freebsd-ports-gnome-5d106efb4223d304276163b865d2ebaa7574db25.zip | |
Document gld -- format string and buffer overflow vulnerabilities
Diffstat (limited to 'security')
| -rw-r--r-- | security/vuxml/vuln.xml | 37 |
1 files changed, 37 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 446c6af45860..2681f63ed9e8 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -32,6 +32,43 @@ EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="6c2d4f29-af3e-11d9-837d-000e0c2e438a"> + <topic>gld -- format string and buffer overflow vulnerabilities</topic> + <affects> + <package> + <name>gld</name> + <range><lt>1.5</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>Gld has been found vulnerable to multiple buffer overflows as + well as multiple format string vulnerabilities.</p> + <blockquote cite="http://marc.theaimsgroup.com/?l=bugtraq&m=111339935903880"> + <p>An attacker could exploit this vulnerability to execute + arbitrary code with the permissions of the user running Gld, + the default user being root.</p> + </blockquote> + <p>The FreeBSD port defaults to running gld as the root user. + The risk of exploitation can be minimized by making gld + listen on the loopback address only, or configure it to only + accept connections from trusted smtp servers.</p> + </body> + </description> + <references> + <bid>13129</bid> + <bid>13133</bid> + <cvename>CAN-2005-1099</cvename> + <cvename>CAN-2005-1100</cvename> + <mlist msgid="20050412004111.562AC7A890E@ws4-4.us4.outblaze.com">http://marc.theaimsgroup.com/?l=bugtraq&m=111339935903880</mlist> + <mlist msgid="20050413174736.20947.qmail@www.securityfocus.com">http://marc.theaimsgroup.com/?l=bugtraq&m=111342432325670</mlist> + </references> + <dates> + <discovery>2005-04-12</discovery> + <entry>2005-04-19</entry> + </dates> + </vuln> + <vuln vid="0163b498-af54-11d9-acd0-000854d03344"> <topic>axel -- remote buffer overflow</topic> <affects> |