0c58bd1726
1.) An integer overflow in ls in the fileutils or coreutils packages may allow local users to cause a denial of service or execute arbitrary code via a large -w value, which could be remotely exploited via applications that use ls, such as wu-ftpd. 2.) ls in the fileutils or coreutils packages allows local users to consume a large amount of memory via a large -w value, which can be remotely exploited via applications that use ls, such as wu-ftpd. See http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2003-0853 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2003-0854 and the original report http://www.guninski.com/binls.html for details. Patches taken from Red Hat's Security Advisory RHSA-2003:309-01. reported by reed@ bump PKGREVISION |
||
---|---|---|
.. | ||
patches | ||
DESCR | ||
distinfo | ||
Makefile | ||
PLIST |