[SECURITY] [DSA 832-1] New gopher packages fix several buffer overflows

-------------------------------------------------------------------------- Debian Security Advisory DSA 832-1 [email protected] http://www.debian.org/security/ Martin Schulze September 30th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 832-1] New gopher packages fix several buffer overflows

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 832-1 [email protected] http://www.debian.org/security/ Martin Schulze September 30th, 2005 http://www.debian.org/security/faq -...

CVE-2005-2772

This CVE concerns the University of Minnesota gopher client 3.0.9, where multiple stack-based buffer overflows allow a remote attacker (via a malicious Gopher server) to execute arbitrary code. The flaws include an overflow in handling a long "+VIEWS:" reply in VIfromLine and issues in FIOgetargv...