cpet/freebsd-ports
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Note that older packages of bmon were dangerously installed set-user-ID.

Browse Source 
Approved by:	portmgr
This commit is contained in:
Jacques Vidrine 2004-10-05 14:54:27 +00:00
parent 9ae4693f5b
commit ca9a79470c
Notes: svn2git 2021-03-31 03:12:20 +00:00 
svn path=/head/; revision=118552
1 changed files with 25 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

25
security/vuxml/vuln.xml
View File

@ -32,6 +32,31 @@ EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
-->
<vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
<vuln vid="938f357c-16dd-11d9-bc4a-000c41e2cdad">
<topic>bmon -- unsafe set-user-ID application</topic>
<affects>
<package>
<name>bmon</name>
<range><lt>1.2.1_2</lt></range>
</package>
</affects>
<description>
<body xmlns="http://www.w3.org/1999/xhtml">
<p>Jon Nistor reported that the FreeBSD port of bmon was
installed set-user-ID root, and executes commands using
relative paths. This could allow local user to easily obtain
root privileges.</p>
</body>
</description>
<references>
<freebsdpr>ports/67340</freebsdpr>
</references>
<dates>
<discovery>2004-05-29</discovery>
<entry>2004-10-05</entry>
</dates>
</vuln>
<vuln vid="84ab58cf-e4ac-11d8-9b0a-000347a4fa7d">
<topic>gnutls -- certificate chain verification DoS</topic>
<affects>