Add information about CVS-2008-1771 and update earlier entry for mt-daapd to add addl. references. Fix: -- Said one park ranger, 'There is considerable overlap between the intelligence of the smartest bears and the dumbest tourists.' Mark D. Foster, CISSP <mark@foster.cc> http://mark.foster.cc/--MaqPz8W7BCUKDajG4EJAzq2qiA8PfebFu5y2HTdMQfWMu5fK Content-Type: text/plain; name="vuln.xml.patch1" Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename="vuln.xml.patch1" --- vuln.xml.old Wed Apr 30 22:28:10 2008 +++ vuln.xml Wed Apr 30 22:35:16 2008 @@ -34,6 +34,33 @@ --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="821f0b2a-173f-11dd-8447-00b0d07e6c7e"> + <topic>mt-daapd -- Integer overflow</topic> + <affects> + <package> + <name></name> + <range><lt>0.2.4.2</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>FrSIRT reports:</p> + <blockquote cite="http://www.frsirt.com/english/advisories/2008/1303"> + <p>A vulnerability has been identified in mt-daapd (Multi-Threaded DAAP Daemon), which could be exploited by remote attackers to cause a denial of service or compromise an affected system. This issue is caused by a buffer overflow error in the "ws_getpostvars()" [src/webserver.c] function when processing a negative "Content-Length:" header value, which could be exploited by remote unauthenticated attackers to crash an affected application or execute arbitrary code.</p> + </blockquote> + </body> + </description> + <references> + <cvename>CVE-2008-1771</cvename> + <url>http://secunia.com/advisories/29917</url> + <url>http://www.frsirt.com/english/advisories/2008/1303</url> + </references> + <dates> + <discovery>2008-04-21</discovery> + <entry>2008-04-30</entry> + </dates> + </vuln> + <vuln vid="12b336c6-fe36-11dc-b09c-001c2514716c"> <topic>mozilla -- multiple vulnerabilities</topic> <affects> @@ -2167,10 +2194,12 @@ </description> <references> <cvename>CVE-2007-5824</cvename> + <cvename>CVE-2007-5825</cvename> </references> <dates> <discovery>2007-11-05</discovery> <entry>2007-11-12</entry> + <modified>2008-04-30</modified> </dates> </vuln>
Responsible Changed From-To: freebsd-ports-bugs->miwi I'll take it.
State Changed From-To: open->closed Committed. Thanks!
miwi 2008-05-02 20:22:09 UTC FreeBSD ports repository Modified files: security/vuxml vuln.xml Log: - Document mt-daapd -- Integer overflow PR: 123285 (based on) Submitted by: Mark D. Foster <mark@foster.cc> Revision Changes Path 1.1619 +34 -1 ports/security/vuxml/vuln.xml _______________________________________________ cvs-all@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/cvs-all To unsubscribe, send any mail to "cvs-all-unsubscribe@freebsd.org"