Bug 95343 - [PATCH] security/vuxml: Add new 2.0 <= OpenVPN < 2.0.6 LD_PRELOAD vuln
Summary: [PATCH] security/vuxml: Add new 2.0 <= OpenVPN < 2.0.6 LD_PRELOAD vuln
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: Normal Affects Only Me
Assignee: FreeBSD Security Team (mail alias)
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2006-04-05 11:30 UTC by Matthias Andree
Modified: 2006-04-16 14:40 UTC (History)
1 user (show)

See Also:


Attachments
vuxml-1.1_1.patch (1.89 KB, patch)
2006-04-05 11:30 UTC, Matthias Andree
no flags Details | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Matthias Andree 2006-04-05 11:30:15 UTC
New entry for openvpn -- LD_PRELOAD code execution on client through malicious
or compromised server.

(I don't have the CVE id yet, will add once I get to know it.)

Port maintainer (secteam@FreeBSD.org) is cc'd.

Generated with FreeBSD Port Tools 0.63
Comment 1 Edwin Groothuis freebsd_committer freebsd_triage 2006-04-05 11:32:10 UTC
Responsible Changed
From-To: freebsd-ports-bugs->secteam

Over to maintainer
Comment 2 Matthias Andree 2006-04-06 01:10:39 UTC
Greetings,

as promised, here's the CVE name I just got from James Yonan,
the upstream author.  It is CVE-2006-1629.

Please copy and paste the following line into the references section:

      <cvename>CVE-2006-1629</cvename>
^ that's 6 leading spaces

Thanks,

-- 
Matthias Andree <matthias.andree@gmx.de>
Comment 3 Remko Lodder freebsd_committer freebsd_triage 2006-04-06 05:48:27 UTC
Matthias Andree wrote:
> Greetings,
> 
> as promised, here's the CVE name I just got from James Yonan,
> the upstream author.  It is CVE-2006-1629.
> 
> Please copy and paste the following line into the references section:
> 
>       <cvename>CVE-2006-1629</cvename>
> ^ that's 6 leading spaces
> 
> Thanks,
> 

I imported the cvename, thank you very much!

Cheers,
Remko

-- 
Kind regards,

      Remko Lodder               ** remko@elvandar.org
      FreeBSD                    ** remko@FreeBSD.org

      /* Quis custodiet ipsos custodes */
Comment 4 Simon L. B. Nielsen freebsd_committer freebsd_triage 2006-04-16 14:40:08 UTC
State Changed
From-To: open->closed

Close PR since remko committed the update some time ago.