Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Vista
BugTraq
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
man-db[] multiple(4) vulnerabilities. Jul 29 2003 09:03PM
Vade 79 (v9 fakehalo deadpig org)


[part 1: add_to_dirlist() buffer overflow]

man-db contains a buffer overflow vulnerability do to the lack of bounds

checking in multiple sscanf() calls. which formats the user supplied file

~/.manpath. here is the function(src/manp.c):

static void add_to_dirlist (FILE *config, int user)...

[ more ]  




 

Privacy Statement
Copyright 2008, SecurityFocus