mirror/freebsd-ports
1
0
Fork 0
mirror of https://git.FreeBSD.org/ports.git synced 2024-11-30 01:15:52 +00:00
Code Issues Releases Activity

Document evolution -- remote format string vulnerabilities.

Browse Source 
Approved by:	portmgr (blanket, VuXML)
This commit is contained in:
Simon L. B. Nielsen 2005-08-27 22:25:30 +00:00
parent 32797fc1e4
commit b7a42fed66
Notes: svn2git 2021-03-31 03:12:20 +00:00 
svn path=/head/; revision=140993
1 changed files with 43 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

43
security/vuxml/vuln.xml
View File

@ -32,6 +32,49 @@ EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
-->
<vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
<vuln vid="e5afdf63-1746-11da-978e-0001020eed82">
<topic>evolution -- remote format string vulnerabilities</topic>
<affects>
<package>
<name>evolution</name>
<range><gt>1.5</gt><lt>2.3.7</lt></range>
</package>
</affects>
<description>
<body xmlns="http://www.w3.org/1999/xhtml">
<p>SO-AND-SO reports:</p>
<blockquote cite="http://www.sitic.se/eng/advisories_and_recommendations/sa05-001.html">
<p>Evolution suffers from several format string bugs when
handling data from remote sources. These bugs lead to
crashes or the execution of arbitrary assembly language
code.</p>
<ol>
<li>The first format string bug occurs when viewing the
full vCard data attached to an e-mail message.</li>
<li>The second format string bug occurs when displaying
contact data from remote LDAP servers.</li>
<li>The third format string bug occurs when displaying
task list data from remote servers.</li>
<li>The fourth, and least serious, format string bug
occurs when the user goes to the Calendars tab to save
task list data that is vulnerable to problem 3
above. Other calendar entries that do not come from task
lists are also affected.</li>
</ol>
</blockquote>
</body>
</description>
<references>
<cvename>CAN-2005-2549</cvename>
<cvename>CAN-2005-2550</cvename>
<url>http://www.sitic.se/eng/advisories_and_recommendations/sa05-001.html</url>
</references>
<dates>
<discovery>2005-08-10</discovery>
<entry>2005-08-27</entry>
</dates>
</vuln>
<vuln vid="38c76fcf-1744-11da-978e-0001020eed82">
<topic>pam_ldap -- authentication bypass vulnerability</topic>
<affects>