kpriv/freebsd-ports
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Add entry for exploitable buffer overflow in mcweject.

Browse source 
PR:		111365
Submitted by:	Jeff Forsythe<tornandfilthy2006@yahoo.com>
This commit is contained in:
Stefan Walter 2007-04-08 19:45:57 +00:00
parent ec0468f41b
commit 88f4ad87a7
Notes: svn2git 2021-03-31 03:12:20 +00:00 
svn path=/head/; revision=189507
1 changed files with 30 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

30
security/vuxml/vuln.xml
View file

@ -34,6 +34,36 @@ Note: Please add new entries to the beginning of this file.
-->
<vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
<vuln vid="84d3fbb2-e607-11db-8a32-000c76189c4c">
<topic>mcweject -- exploitable buffer overflow</topic>
<affects>
<package>
<name>mcweject</name>
<range><le>0.9</le></range>
</package>
</affects>
<description>
<body xmlns="http://www.w3.org/1999/xhtml">
<p>CVE reports:</p>
<blockquote cite="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1719">
<p>Buffer overflow in eject.c in Jason W. Bacon mcweject 0.9 on
FreeBSD, and possibly other versions, allows local users to execute
arbitrary code via a long command line argument, possibly involving
the device name.</p>
</blockquote>
</body>
</description>
<references>
<freebsdpr>ports/111365</freebsdpr>
<url>http://www.milw0rm.com/exploits/3578</url>
<cvename>CVE-2007-1719</cvename>
</references>
<dates>
<discovery>2007-03-27</discovery>
<entry>2007-04-08</entry>
</dates>
</vuln>
<vuln vid="72999d57-d6f6-11db-961b-005056847b26">
<topic>webcalendar -- "noSet" variable overwrite vulnerability</topic>
<affects>