🟡 Medium ⏱ 10–30 min Last verified: 28 November 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: php — multiple vulnerabilities Related CVEs: CVE-2007-0905 CVE-2007-0906 CVE-2007-0907 CVE-2007-0908 CVE-2007-0909 CVE-2007-0910 CVE-2007-0988 CVE-2007-1001 Upstream summary: The PHP development team reports: Security Enhancements and Fixes in PHP 5.2.2 and PHP […]
Introduction Deploying install vault for secrets management on freebsd 12 on a FreeBSD 12 machine differs from Linux in several important ways: packages come from the FreeBSD Ports Collection or the binary pkg repository, services are registered in /etc/rc.conf via sysrc(8), and firewall rules are written in pf.conf(5) syntax. This tutorial stays entirely within the […]
🟢 Low ⏱ 5–15 min Last verified: 28 November 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: tarsnap — buffer overflow and local DoS Upstream summary: Colin Percival reports: 1. SECURITY FIX: When constructing paths of objects being archived, a buffer could overflow by one byte upon […]
🟡 Medium ⏱ 10–30 min Last verified: 28 November 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: expat — multiple vulnerabilities Related CVEs: CVE-2005-3183 CVE-2009-3560 CVE-2009-3720 CVE-2016-9063 CVE-2017-9233 Upstream summary: Mitre reports: An integer overflow during the parsing of XML using the Expat library. XML External Entity […]
🟡 Medium ⏱ 10–30 min Last verified: 26 November 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: tiff — buffer overflow vulnerability Related CVEs: CVE-2004-0803 CVE-2004-0804 CVE-2004-0886 CVE-2004-1308 CVE-2005-1544 Upstream summary: A Gentoo Linux Security Advisory reports: Tavis Ormandy of the Gentoo Linux Security Audit Team discovered […]
🟢 Low ⏱ 5–15 min Last verified: 26 November 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: xfce — multiple vulnerabilities Related CVEs: CVE-2007-6531 CVE-2007-6532 Upstream summary: Gentoo reports: A remote attacker could entice a user to install a specially crafted "rc" file to execute arbitrary code […]
🟢 Low ⏱ 5–15 min Last verified: 26 November 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mod_perl2 — execute arbitrary Perl code Upstream summary: mod_perl2 2.0.11 fixes Arbitrary Perl code execution in the context of the user account via a user-owned .htaccess. mod_perl 2.0 through 2.0.10 […]
🟢 Low ⏱ 5–15 min Last verified: 26 November 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: graphviz — format string vulnerability Upstream summary: Joshua Rogers reports: A format string vulnerability has been found in `graphviz'. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]
🟡 Medium ⏱ 10–30 min Last verified: 26 November 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: jabberd — authentication bypass vulnerability Related CVEs: CVE-2006-1329 CVE-2012-3525 CVE-2017-10807 Upstream summary: SecurityFocus reports: JabberD is prone to an authentication-bypass vulnerability. An attacker can exploit this issue to bypass the […]
🟠 High ⏱ 15–60 min Last verified: 26 November 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libgadu — multiple vulnerabilities Related CVEs: CVE-2004-0005 CVE-2004-0006 CVE-2004-0007 CVE-2004-0008 CVE-2004-0500 CVE-2004-0754 CVE-2004-0784 CVE-2004-0785 +12 more Upstream summary: Wojtek Kaniewski reports: Multiple vulnerabilities have been found in libgadu, a library […]
