sup -- format string vulnerability

2004-06-19T00:00:00
ID 2C5757F4-88BF-11D9-8720-0007E900F87B
Type freebsd
Reporter FreeBSD
Modified 2004-06-19T00:00:00

Description

Debian Security Advisory reports:

jaguar@felinemenace.org discovered a format string vulnerability in sup, a set of programs to synchronize collections of files across a number of machines, whereby a remote attacker could potentially cause arbitrary code to be executed with the privileges of the supfilesrv process (this process does not run automatically by default).