diff options
| author | Xin LI <delphij@FreeBSD.org> | 2011-05-23 09:58:16 +0000 |
|---|---|---|
| committer | Xin LI <delphij@FreeBSD.org> | 2011-05-23 09:58:16 +0000 |
| commit | c2abbf9129e3c79d95c7fa7256d2b1405e72e3cd (patch) | |
| tree | c5ac43345bf6e649d2a6383118e102426360d970 /security | |
| parent | - Update to 1.0.1 (diff) | |
Document pure-ftpd multiple vulnerabilities prior to 1.0.32.
Notes
Notes:
svn path=/head/; revision=274502
Diffstat (limited to 'security')
| -rw-r--r-- | security/vuxml/vuln.xml | 30 |
1 files changed, 30 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index ddac77881788..a400fcea1c52 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -34,6 +34,36 @@ Note: Please add new entries to the beginning of this file. --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="1495f931-8522-11e0-a1c1-00215c6a37bb"> + <topic>pureftpd -- multiple vulnerabilities</topic> + <affects> + <package> + <name>pure-ftpd</name> + <range><lt>1.0.32</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>Pure-FTPd development team reports:</p> + <blockquote cite="http://www.pureftpd.org/project/pure-ftpd/news"> + <p>Support for braces expansion in directory listings has been + disabled -- Cf. CVE-2011-0418.</p> + <p>Fix a STARTTLS flaw similar to Postfix's CVE-2011-0411. + If you're using TLS, upgrading is recommended.</p> + </blockquote> + </body> + </description> + <references> + <bid>46767</bid> + <cvename>CVE-2011-0418</cvename> + <cvename>CVE-2011-1575</cvename> + </references> + <dates> + <discovery>2011-04-01</discovery> + <entry>2011-05-23</entry> + </dates> + </vuln> + <vuln vid="36594c54-7be7-11e0-9838-0022156e8794"> <topic>exim -- remote code execution and information disclosure</topic> <affects> |