FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2024-11-23 17:01:17 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML ID	Description
a7975581-ee26-11e1-8bd8-0022156e8794	inn -- plaintext command injection into encrypted channel INN developers report: Fixed a possible plaintext command injection during the negotiation of a TLS layer. The vulnerability detailed in CVE-2011-0411 affects the STARTTLS and AUTHINFO SASL commands. nnrpd now resets its read buffer upon a successful negotiation of a TLS layer. It prevents malicious commands, sent unencrypted, from being executed in the new encrypted state of the session. Discovery 2012-08-14 Entry 2012-08-25 inn < 2.5.2_2 CVE-2012-3523 CVE-2011-0411 https://www.isc.org/software/inn/2.5.3article
fd376b8b-41e1-11d8-b096-0020ed76ef5a	Buffer overflow in INN control message handling A small, fixed-size stack buffer is used to construct a filename based on a received control message. This could result in a stack buffer overflow. Discovery 2004-01-07 Entry 2004-01-08 Modified 2004-10-21 inn >= 2.4.* lt 2.4.1 inn-stable < 20031022_1 http://marc.theaimsgroup.com/?l=inn-workers&m=107351974008605

VuXML ID

Description

a7975581-ee26-11e1-8bd8-0022156e8794

inn -- plaintext command injection into encrypted channel

INN developers report:

Fixed a possible plaintext command injection during the negotiation of a TLS layer. The vulnerability detailed in CVE-2011-0411 affects the STARTTLS and AUTHINFO SASL commands. nnrpd now resets its read buffer upon a successful negotiation of a TLS layer. It prevents malicious commands, sent unencrypted, from being executed in the new encrypted state of the session.

Discovery 2012-08-14
Entry 2012-08-25
inn

< 2.5.2_2

CVE-2012-3523
CVE-2011-0411
https://www.isc.org/software/inn/2.5.3article

fd376b8b-41e1-11d8-b096-0020ed76ef5a

Buffer overflow in INN control message handling

A small, fixed-size stack buffer is used to construct a filename based on a received control message. This could result in a stack buffer overflow.

Discovery 2004-01-07
Entry 2004-01-08
Modified 2004-10-21
inn

>= 2.4.* lt 2.4.1

inn-stable

< 20031022_1

http://marc.theaimsgroup.com/?l=inn-workers&m=107351974008605