FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The last vuln.xml file processed by FreshPorts is:

Revision:  360546
Date:      2014-07-04
Time:      06:38:23Z
Committer: swills

List all Vulnerabilities, by package

List all Vulnerabilities, by date

These are the vulnerabilities relating to the commit you have selected:

VuXML IDDescription
a7975581-ee26-11e1-8bd8-0022156e8794inn -- plaintext command injection into encrypted channel

INN developers report:

Fixed a possible plaintext command injection during the negotiation of a TLS layer. The vulnerability detailed in CVE-2011-0411 affects the STARTTLS and AUTHINFO SASL commands. nnrpd now resets its read buffer upon a successful negotiation of a TLS layer. It prevents malicious commands, sent unencrypted, from being executed in the new encrypted state of the session.


Discovery 2012-08-14
Entry 2012-08-25
inn
lt 2.5.2_2

CVE-2012-3523
CVE-2011-0411
https://www.isc.org/software/inn/2.5.3article
a7975581-ee26-11e1-8bd8-0022156e8794inn -- plaintext command injection into encrypted channel

INN developers report:

Fixed a possible plaintext command injection during the negotiation of a TLS layer. The vulnerability detailed in CVE-2011-0411 affects the STARTTLS and AUTHINFO SASL commands. nnrpd now resets its read buffer upon a successful negotiation of a TLS layer. It prevents malicious commands, sent unencrypted, from being executed in the new encrypted state of the session.


Discovery 2012-08-14
Entry 2012-08-25
inn
lt 2.5.2_2

CVE-2012-3523
CVE-2011-0411
https://www.isc.org/software/inn/2.5.3article