Commit History - (may be incomplete: for full details, see links to repositories near top of page) Commit Credits Log message 1.1_1 mnag clamav -- Multiple Vulnerabilities 1.1_1 remko Add cvename to the recent OpenVPN entry.
Submitted by: Matthias Andree <matthias dot andree at gmx dot de> 1.1_1 remko Document mediawiki -- hardcoded placeholder string security bypass
vulnerability. 1.1_1 remko Document netpbm -- buffer overflow in pnmtopng. 1.1_1 remko Document zoo -- stack based buffer overflow. 1.1_1 remko Document mediawiki -- cross site scripting vulnerability. 1.1_1 mnag dia -- XFig Import Plugin Buffer Overflow 1.1_1 mnag openvpn -- LD_PRELOAD code execution on client through malicious or compromised
server
PR: 95343
Submitted by: Matthias Andree <matthias.andree__gmx.de> 1.1_1 mnag samba -- Exposure of machine account credentials in winbind log files 1.1_1 brooks Upgrade pubcookie from 3.3.0-beta2 to 3.3.0a fixing serious XSS
vulnerabilities. 1.1_1 edwin Fill in the version numbers for the vids
6e3b12e2-6ce3-11da-b90c-000e0c2e438a and
82a41084-6ce7-11da-b90c-000e0c2e438a to show which Mantis versions
are vulnerable.
Submitted by: In cooperation with dvl 1.1_1 simon For horde -- remote code execution vulnerability in the help viewer
entry:
- Add more references.
- Reformat description to follow normal formatting style better.
- Remove a redundant line in the description to make the meaning more
clear. 1.1_1 mnag freeradius -- EAP-MSCHAPv2 Authentication Bypass 1.1_1 thierry Add an entry about Horde's remote code execution vulnerability in the
help viewer. 1.1_1 mnag linux-realplayer -- buffer overrun
linux-realplayer -- heap overflow
Reviewed by: simon 1.1_1 remko s/8 spaces/tab/ in the sendmail entry.
Noticed by: simon 1.1_1 remko Record that our sendmail port was also vulnerable.
Bump modification date. 1.1_1 remko Update the 'Evolution - remote format string vulnerabilities' entry. 1.1_1 remko Document the latest three FreeBSD Security Advisories:
SA-06:13
SA-06:12
SA-06:11 1.1_1 lesi xorg-server -- privilege escalation
Reviewed by: simon 1.1_1 mnag - heimdal -- Multiple vulnerabilities
Reviewed by: simon 1.1_1 vd Document ftp/curl's TFTP packet buffer overflow vulnerability
Reworked by: simon
Approved by: security-officer (simon) 1.1_1 brooks Add drupal <= 4.6.5 vulns. 1.1_1 thierry Add an entry for Horde < 3.1 (SA19246).
Noticed by: mnag 1.1_1 simon Document linux-flashplugin -- arbitrary code execution vulnerability. 1.1_1 remko Document nfs -- remote denial of service (FreeBSD: SA-06:10)
Approved by: portmgr (blanket VuXML) 1.1_1 remko Add OpenSSH Remote Denial of Service (FreeBSD SA-06:09.openssh) to the
vuxml list.
Approved by: portmgr (Blanket VuXML) 1.1_1 remko Correct the gpg entry wrt. style.
Approved by: portmgr (Blanket VuXML) 1.1_1 kuriyama Update to 1.4.2.2.
Security: GnuPG does not detect injection of unsigned data
References:
http://lists.gnupg.org/pipermail/gnupg-announce/2006q1/000216.html
Probbed by: simon
Approved by: portmgr (erwin) 1.1_1 vd Document multimedia/mplayer's heap overflow in the ASF demuxer
Reviewed by: simon
Approved by: portmgr (implicit), security-officer (simon) 1.1_1 marius Add the ssh2-nox11 slave port to the list of ports affected by
VID 594ad3c5-a39b-11da-926c-0800209adf0e.
Prodded by: Dmitry Pryanishnikov <dmitry@atlantis.dp.ua>
Approved by: portmgr (erwin) 1.1_1 marius Document a SSH.COM SFTP server format string vulnerability affecting
the security/ssh2 port.
Approved by: portmgr (erwin) 1.1_1 naddy Document GNU tar invalid headers buffer overflow.
Approved by: portmgr (erwin) 1.1_1 remko Remove the pinentry entry. It was gentoo specific and I overlooked
that.
Noticed by: Dejan Lesjak <dejan dot lesjak at ijs dot si>
Pointyhat: remko
Approved by: portmgr (implicit VuXML) 1.1_1 skv Document Bugzilla [2.*, 2.20.1) vulnerabilities.
Approved by: security-officer (simon)
Approved by: portmgr (implicit) 1.1_1 delphij Document squirrelmail (< 1.4.6) vulnerabilities:
CVE-2006-0377 (IMAP injection)
CVE-2006-0195 (XSS)
CVE-2006-0188 (XSS)
Approved by: security-officer (simon)
Approved by: portmgr (implicit) 1.1_1 remko Remove the latest squid entry, it already existed.
Noticed by: Thomas-Martin Seck <tmseck at netcologne dot de> 1.1_1 remko Document gedit -- format string vulnerability. 1.1_1 remko Add koffice to the RTF import issue. 1.1_1 remko Documenet WebCalendar -- unauthorized access vulnerability. 1.1_1 remko Document abiword -- stack based buffer overflow vulnerabilities. 1.1_1 remko Document pinentry -- local privilege escalation.
Correct previous entry (the entry time was invalid). 1.1_1 remko Document squid -- dns lookup spoofing. 1.1_1 simon Document postgresql81-server -- SET ROLE privilege escalation. 1.1_1 simon Document gnupg -- false positive signature verification. 1.1_1 remko Document rssh -- privilege escalation vulnerability.
The port will be marked forbidden due to possible
root access. 1.1_1 remko Document tor -- malicious tor server can locate a hidden service. 1.1_1 remko Document sudo -- arbitrary command execution. 1.1_1 remko Document libtomcrypt -- weak signature scheme with ECC keys. 1.1_1 remko Document mantis -- "view_filters_page.php" cross site scripting vulnerability. 1.1_1 remko Document phpbb -- multiple vulnerabilities.
Reviewed by: simon 1.1_1 remko Document postgresql -- character conversion and tsearch2 vulnerabilities. 1.1_1 remko Document heartbeat -- insecure temporary file creation vulnerability. 1.1_1 remko Document kpdf -- heap based buffer overflow 1.1_1 remko Document perl, webmin, usermin -- perl format string integer wrap vulnerability
PR: ports/91202
Submitted by: KOMATSU Shinichiro <koma2 at lovepeers dot org>
(slightly modified). 1.1_1 remko Document phpicalendar -- cross site scripting vulnerability and
document phpicalendar -- file disclosure vulnerability [1].
Reviewed by: simon [1]
Spotted on: cvs-ports@ [1] 1.1_1 remko Document FreeBSD -- Infinite loop in SACK handling (FreeBSD SA 06.08) 1.1_1 remko Document pf -- IP fragment handling panic, FreeBSD SA 06.07 1.1_1 remko Document FreeBSD -- Local kernel memory disclosure
(FreeBSD SA 06.07). 1.1_1 remko Document IEEE 802.11 -- buffer overflow (FreeBSD SA 06.05). 1.1_1 remko Add FreeBSD SA 06.04.ipfw to the vuln.xml list. 1.1_1 simon Mark ivtools 1.2.3 as fixed for jpeg vulnerabilities. Note that this
version is not yet in ports, but marking the new version fixed now
make porting a bit simpler. 1.1_1 simon Document kpopup -- local root exploit and local denial of service.
PR: ports/92359
Submitted by: Ion-Mihai "IOnut" Tetcu <itetcu@people.tecnik93.com> 1.1_1 remko Oops. Forgot to modify the discovery date.
Spotted by: simon (again) 1.1_1 remko Add 4 FreeBSD advisories to the VuXML database.
The other recently released advisories will be
added later today.
o SA-06:03.cpio
o SA-06:02.ee
o SA-06:01.texindex
o SA-05:20.cvsbug 1.1_1 edwin SHA256ify
Approved by: krion@ 1.1_1 brooks Document local root exploit in SGE. 1.1_1 barner Document "fetchmail -- crash when bouncing a message" DOS vulnerability.
Reviewed by: secteam (simon) 1.1_1 simon - Update description and references for "clamav -- possible heap
overflow in the UPX code" now that more information is available.
- Remove some EOL whitespace. 1.1_1 ehaupt Add an entry for clamav/clamav-devel
Reviewed by: simon (secteam) 1.1_1 simon Document milter-bogom -- headerless message crash.
Reported by: Victor Balada Diaz <victor@bsdes.net> 1.1_1 simon Mark latest bnc version as fixed wrt. to "fd_set -- bitmap index
overflow in multiple applications".
Reported by: Christian Elmerot <Chreo At chreo , net> 1.1_1 simon Document two bogofilter vulnerabilities.
Submitted by: Matthias Andree <matthias.andree@gmx.de> 1.1_1 thierry Add an entry for rxvt-unicode < 6.3: root privileges were not restored
before the call to openpty(), so the permissions on the pty device node
remain root:wheel 666 after opening a new terminal.
Discovered by: Ryan Beasley <ryanb (at) rainbowdevilsland.co.uk> 1.1_1 lev `ru-apache' and `ru-apache+mod_ssl' was patchet against CAN-2005-3352
(http://www.FreeBSD.org/ports/portaudit/9fff8dc8-7aa7-11da-bf72-00123f589060.html )
Yes, changes are validated with xmllint at this time. 1.1_1 remko Correct a little typo. 1.1_1 remko Document apache -- mod_imap cross-site scripting flaw.
I expanded the diff from the PR a bit to denote other
affected apache ports as well. Therefor mistakes in
that should be redirected to me.
Also bump the copyright year for the vuxml file.
PR: ports/91157 (based on)
Submitted by: KOMATSU Shinichiro <koma2 at lovepeers dot org> 1.1_1 hrs Fix the affected versions of 9b4facec-6761-11da-99f6-00123ffe8333.
PR: ports/91156
Submitted by: KOMATSU Shinichiro (koma2 at lovepeers dot org) 1.1_1 simon Add missing "</package>" tag from rev. 1.917, which caused the file to
be invalid XML and in turn caused the portaudit database to be only
partially built.
Bump modification date of all entries which had modification date on
the 23'rd to make sure VuXML consumers catch the updates.
Portaudit problem reported by: Peter Vohmann
Pointy hat to: lev 1.1_1 lev russian/apache13 and russian/apache13-modssl were updated and new version
doesn't
contain any known vulnerabilities. 1.1_1 simon Bump modification date for entries touched by last commit. 1.1_1 remko Update the phpSysInfo entries, PR ports/90849 will solve the documented
issues.
Requested by: Babak Farrokhi <babak at farrokhi dot net> 1.1_1 remko Fix another typo in my nbd entry.
Spotted by: Linus Nordberg <linus at nordberg dot se> 1.1_1 remko Correct a typo.
Submitted by: Linus Nordberg <linus at nordberg dot se> 1.1_1 remko Update the affected range.
Prodded by: erwin 1.1_1 remko The previous entry should have read:
Document ndb-server -- buffer overflow vulnerability 1.1_1 remko : 1.1_1 garga - Register scponly-4.1 vulnerabilities
PR: ports/90813
Submitted by: maintainer
Security:
https://lists.ccs.neu.edu/pipermail/scponly/2005-December/001027.html 1.1_1 remko Correct the recent horde entries as per the FDP
(made the entries max 72 chars wide). 1.1_1 barner Document fetchmail vulnerability:
http://fetchmail.berlios.de/fetchmail-SA-2005-03.txt (CVE-2005-4348)
Reviewed by: secteam (simon@) 1.1_1 remko Document the following mantis vulnerabilities:
o "t_core_path" file inclusion vulnerability
o "view_filters_page.php" cross-site scripting vulnerability 1.1_1 thierry - Add entries for several XSS vulnerabilities in Horde, Kronolith, Nag
Turba and Mnemo;
- Fix a typo in the previous Horde entry. 1.1_1 mnag Add curl -- URL buffer overflow vulnerability
Reviewed by: simon 1.1_1 mnag Add phpmyadmin -- register_globals emulation "import_blacklist" manipulation
Add phpmyadmin -- XSS vulnerabilities 1.1_1 mnag Add ffmpeg -- libavcodec buffer overflow vulnerability
Reviewed by: simon 1.1_1 mnag Add trac -- search module SQL injection vulnerability
Reviewed by: simon 1.1_1 mnag Add drupal -- multiple vulnerabilities
Reviewed by: simon 1.1_1 simon Document opera -- multiple vulnerabilities. 1.1_1 simon Document opera -- command line URL shell command injection. 1.1_1 mnag Add entry to www/mambo
Reviewed by: simon
