Document evolution -- remote format string vulnerabilities.

Approved by:    portmgr (blanket, VuXML)

Document pam_ldap -- authentication bypass vulnerability.

Approved by:    portmgr (blanket, VuXML)

Mark phpgroupware as vulnerable to pear-XML_RPC -- remote PHP code
injection vulnerability.

Reported by:    olgeni
Approved by:    portmgr (blanket, VuXML)

Document pcre -- regular expression buffer overflow.

Approved by:    portmgr (blanket, VuXML)

Mark latest awstats port as fixed for awstats -- arbitrary code
execution vulnerability.

Approved by:    portmgr (blanket, VuXML)

Document mail/elm remote buffer overflow vulnerability.

PR:             ports/85225
Submitted by:   Kevin Day <toasty@dragondata.com> (elm maintainer)
Approved by:    portmgr (blanket, VuXML)

Document four vulnerabilities in openvpn:

* openvpn -- multiple TCP clients connecting with the same certificate at the
same time can crash the server
* openvpn -- denial of service: malicious authenticated "tap" client
can deplete server virtual memory
* openvpn -- denial of service: undecryptable packet from authorized client can
disconnect unrelated clients
* openvpn -- denial of service: client certificate validation can disconnect
unrelated clients

Approved by:    portsmgr (blanket VuXML)
Submitted by:   Matthias Andree <matthias dot andree at gmx dot de>

Also mark phpAdsNew as affected by "pear-XML_RPC -- remote PHP code
injection vulnerability".

Approved by:    portmgr (blanket, VuXML)

Add the fixed version so that people do not get a stale portaudit when the
update is there.
Also fix some indentation that i overlooked.

Noticed by:             simon (both of the items)
Approved by:            portsmgr (blanket VuXML)

Document tor -- diffie-hellman handshake flaw.

Submitted by:           Michal Bartkowiak <michal at nonspace dot net>
Approved by:            portsmgr (blanket VuXML)

gpdf has been fixed for "xpdf -- disk fill DoS vulnerability", mark it
as such.

Approved by:    portmgr (blanket, VuXML)

Add eGroupWare to the list of packages affected by "pear-XML_RPC --
remote PHP code injection vulnerability".

Approved by:    portmgr (blanket, VuXML)

Document acroread -- plug-in buffer overflow vulnerability.

Approved by:    portmgr (blanket, VuXML)

Add phpmyfaq and drupal to the "pear-XML_RPC -- remote PHP code
injection vulnerability" entry since they contain an embedded version of
pear-XML_RPC.

Fix typo in body of the latest xpdf entry (note: no modified date bump
as this is a minor typo fix which does change <affects>).

Approved by:    portmgr (blanket, VuXML)

Document pear-XML_RPC -- remote PHP code injection vulnerability.

Submitted by:   hrs
Approved by:    portmgr (blanket, VuXML)

Document awstats -- arbitrary code execution vulnerability.

Approved by:    portmgr (blanket, VuXML)

After further examination it turns out that gnugadu does not include
libgadu, at least not any in any current version, and from looking at
the gnugadu code there is no direct indication that this code should
actually be vulnerable to the other libgadu vulnerabilities. [1]

The gaim part of libgadu -- multiple vulnerabilities was fixed in
1.4.0_1. [2]

Polish translation clue:        pjd [1]
General clue by:                markus [2]
Not enough checking:            simon
Approved by:                    portmgr (blanket, VuXML)

Remove pl-gnugadu2 and kadu from being affected by libgadu -- multiple
vulnerabilities, since it turns out that they use libgadu from the ekg
port.

Approved by:    portmgr (blanket, VuXML)

Document libgadu -- multiple vulnerabilities.

Approved by:    portmgr (blanket, VuXML)

Document gaim -- AIM/ICQ away message buffer overflow and gaim --
AIM/ICQ non-UTF-8 filename crash.

Approved by:    portmgr (blanket, VuXML)

Remove pdftohtml from the list of packages affected by xpdf -- disk
fill DoS vulnerability, since it includes xpdf 2, which should not be
affected.

Approved by:    portmgr (blanket, VuXML)

Document xpdf -- disk fill DoS vulnerability.

Approved by:    portmgr (blanket, VuXML)

Mark apache 1.3.33_2 as fixed for apache -- http request smuggling.

Approved by:    portmgr (blanket, VuXML)

Document gforge -- XSS and email flood vulnerabilities.

Approved by:    portmgr (blanket, VuXML)

Document postnuke -- multiple vulnerabilities.

Approved by:    portmgr (blanket, VuXML)

Document mambo -- multiple vulnerabilities.

Approved by:    portmgr (blanket, VuXML)

Correct the ranges for the IPSec advisory and the devfs advisory.
Also correct proper ranges for the zlib advisory.

Approved by:            portsmgr (blanket VuXML)

Document some recent FreeBSD advisories:
o devfs -- ruleset bypass.
o zlib -- buffer overflow vulnerability.
o ipsec -- Incorrect key usage in AES-XCBC-MAC.

Approved by:    portsmgr (blanket VuXML)

Add some more entries to the apache -- http smuggling vulnerability.

PR:             ports/84312
Submitted by:   Dmitry A Grigorovich <odip at bionet dot nsc dot ru>
Approved by:    portsmgr (blanket VuXML)

Document proftpd -- format string vulnerabilities.

Approved by:    portmgr (blanket, VuXML)

Note that the fix for gnupg -- OpenPGP symmetric encryption
vulnerability in gnupg is not complete (see entry for details).

Discussed with: nectar
Approved by:    portmgr (blanket, VuXML)

Mark p5-Crypt-OpenPGP, pgp, and pgpin as vulnerable to gnupg --
OpenPGP symmetric encryption vulnerability.

Reminded by:    nectar
Approved by:    portmgr (blanket, VuXML)

Mark latest gdal version as fixed for all tiff vulnerabilities.

Added nbsmtp format string vulnerability.

Approved by:    nectar (mentor)

Mark latest the linux-tiff and pdflib ports safe from latest tiff
vulnerability.

Thanks to lawrance and netchild for fast fixes.

Document sylpheed -- MIME-encoded file name buffer overflow
vulnerability.

Document phpmyadmin -- cross site scripting vulnerability.

Document gnupg -- OpenPGP symmetric encryption vulnerability.

Note: this is mainly a theoretical vulnerability.

Bump entry date.

Forgotten by:   remko
Spotted by:     simon

Document vim -- vulnerabilities in modeline handling: glob, expand.

Discussed with:         nectar, simon

Document that ekg -- insecure temporary file creation was fixed in
1.6r2,1.

Noted by:       Michal Kalkowski

Add pdflib-perl, fractorama, gdal, iv, ivtools, ja-iv, ja-libimg,
paraview to recent libtiff vulnerabilities since they contain (and
compile) an embedded version of libtiff...

Change MAINTAINER address for ports maintained by the Security Team to
secteam@ instead of security@ to make it more clear that the ports are
not maintained by the freebsd-security@ mailing list.  Both addresses
go to the same people.

Document tiff -- buffer overflow vulnerability.

- Misc. markup/whitespace fixes.
- Collapse a few package entries from the latest apache entry (still
  matches same package names, is just shorter markup-wise).
- Use standard topic style for jaberd entry.
- Fix entry date for jaberd entry.

Document jabberd vulnerabilities that were fixed by the latest update.

Approved by:    perky (mentor)

Be consistent and use the same title for the latest ethereal
vulnerabilities as used for previous entries.

Document opera -- image dragging vulnerability and opera -- download
dialog spoofing vulnerability.

Document ethereal -- multiple vulnerabilities.

- Fix apache 2.1 range for CAN-2005-2088 entry which prevents apache 2.0 from
  upgrading.

Pointyhat to:   clement, remko
Reviewed by:    erwin

Mark apache+mod_ssl-1.3.33+2.8.22_1 as not vulnerable in the latest Apache
entry.

There must be an curse. s/il/li/.

Noticed by:     nectar

Update my latest Apache entry to make clear that this only affects certain
installations (when Apache is used as a HTTP proxy in combination with some
web servers). I didn't make that clear in the first commit.

Requested by:           nectar
Discussed with:         clement

Document apache -- http request smuggling.

Requested by:   clement
Glanced at by:  clement

Set modified date in entry for previous commit.

Cluebat swung by:       simon

Note that the fd_set vulnerability in net/bld was fixed in 0.3.3

Prodded by:     garga
Glanced at by:  remko

Document clamav -- multiple remote buffer overflows.

- Document isc-dhcpd -- format string vulnerabilities (older
  vulnerabilty). [1]
- Use standard title format for latest egroupware entry.

Reminded by:    Panagiotis Christias [1]

Add entry for eGroupWare's recent vulnerabilities.

Document denial of service attack in fetchmail 6.5.2.1.

Reported by:    Matthias Andree <matthias.andree@gmx.de>
Reviewed by:    simon

Update phppgadmin entry to note that it was fixed in 3.5.4 and add a
few references while here anyway.

Prodded by:     Tobias Roth (I think :-) )

Document dnrd -- remote buffer and stack overflow vulnerabilities.

Fix typo in last commit

Noticed by:     Matthias Andree <matthias.andree@gmx.de>

Add more references to latest fetchmail entry [1] and sort references
while here anyway.

Submitted by:   Matthias Andree <matthias.andree@gmx.de> [1]

Document an issue with the LDAP backend provided by PowerDNS.

Document fetchmail -- remote root/code injection from malicious POP3
server.

Submitted by:   Matthias Andree <matthias.andree@gmx.de>

o add kdebase (kate) vulnarability.

Reviewed by:    simon

Add CVE names to recent bugzilla entry.

- Document firefox & mozilla -- multiple vulnerabilities.
- Minor style nit in drupal entry: Use port name (i.e. lower case) as
  first part of the title.

Add an entry for the drupal vulnerabilities.

Fixed incorrect newsfetch and mnogosearch affected package versions

Approved by:    nectar (mentor)

Markup fixed version of net-snmp problem.

Correct a typo: s/lemote/remote/

Spotted by:     simon

Document the following vulnerabilities:
phpSysInfo -- cross site scripting vulnerability
mysql-server -- insecure temporary file creation
net-snmp -- fixproc insecure temporary file creation
phpbb -- multiple vulnerabilities
shtool -- insecure temporary file creation

Approved by:            simon

Document phppgadmin -- "formLanguage" local file inclusion vulnerability.

Document pear-XML_RPC -- information disclosure vulnerabilities.

Document ekg -- insecure temporary file creation.

Document bugzilla -- multiple vulnerabilities.

Document nwclient -- multiple vulnerabilities (old issues).

PR:             ports/82101
Submitted by:   niels
Noticed by:     Derik van Zuetphen <dz@426.ch>

Add CAN reference to recent phpbb vulnerability.

Document acroread -- insecure temporary file creation.

Document two calmav vulnerabilities.

- Add FreeBSD-SA-05:16.zlib.
- Fix ranges for recent security advisories, a bunch of <le> really
  should have been <lt>.

Document acroread -- buffer overflow vulnerability.

Document net-snmp -- remote DoS vulnerability.

Document cacti -- multiple vulnerabilities.

Prodded by:     Babak Farrokhi <babak@farrokhi.net>

- Add another reference to bzip2 -- denial of service and permission
  race vulnerabilities.
- Document two cases of wordpress -- multiple vulnerabilities.

Document the following issues:
 - phpbb -- remote PHP code execution vulnerability
 - pear-XML_RPC -- arbitrary remote code execution

Add certvu reference to kernel -- TCP connection stall denial of service
vulnerability.

Add FreeBSD-SA-05:13.ipfw, FreeBSD-SA-05:14.bzip2, and
FreeBSD-SA-05:15.tcp.

Document ethereal -- multiple protocol dissectors vulnerabilities.

Document tor -- information disclosure.

Document linux-realplayer -- RealText parsing heap overflow.

Document ruby -- arbitrary command execution on XMLRPC server.

- net/cacti - potential SQL injection and cross site scripting attacks

Document three opera issues.

Document sudo -- local race condition vulnerability.

Add another reference to the latest tcpdump issue.

- Add entry for trac -- file upload/download vulnerability.
- Improve the last couple of entries a bit:
  - Whilespace cleanup.
  - Use standard topic format (port name first, then description
    starting with lower case).
  - Make sure SpamAssasin entry also match other 3.0.3 port revisions.

- razor-agents DoS vulnerabilities

PR:             ports/82414
Submitted by:   dawnshade <h-k@mail.ru>