Mandriva Linux Security Advisory : pan (MDVSA-2008:201)

Pavel Polischouk found a boundary error in the PartsBatch class in the Pan newsreader when processing .nzb files, which could allow remote attackers to cause a denial of serice application crash or possibly execute arbitrary code via a crafted .nzb file CVE-2008-2363. The updated packages have be...

Mandriva Update for pan MDVSA-2008:201 (pan)

Check for the Version of pan OpenVAS Vulnerability Test Mandriva Update for pan MDVSA-2008:201 pan Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Mandriva Update for pan MDVSA-2008:201 (pan)

Check for the Version of pan OpenVAS Vulnerability Test Mandriva Update for pan MDVSA-2008:201 pan Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Gentoo Security Advisory GLSA 200807-15 (pan)

The remote host is missing updates announced in advisory GLSA 200807-15. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

[slackware-security] pan

New pan packages are available for Slackware 12.0, 12.1, and -current to fix a security issue. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2008-2363 Here are the details from the Slackware 12.1 ChangeLog:...

openSUSE 10 Security Update : pan (pan-5325)

Specially crafted nzb files could trigger a heap based buffer overflow that could potentially be exploited to execute arbitrary code CVE-2008-2363. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...

CVE-2008-2363

The PartsBatch class in Pan 0.132 and earlier does not properly manage the data structures for Parts batches, which allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted .nzb file that triggers a heap-based buffer overflow...

CVE-2008-2363

The CVE-2008-2363 entry affects Pan 0.132 and earlier, where the PartsBatch class fails to correctly manage data structures for Parts batches. This can allow remote attackers to cause a denial of service (application crash) and potentially execute arbitrary code via a crafted .nzb file that trigg...

Pan .nzb文件解析堆溢出漏洞

BUGTRAQ ID: 29421 CVECAN ID: CVE-2008-2363 Pan是为GNOME设计的Usenet新闻阅读器。 Pan在解析.nzb文件时存在堆溢出漏洞，如果用户受骗读取了恶意的.nzb文件的话，就可以触发这个溢出，但最可能导致的是出现断言错误或分段错误。 Pan Pan 0.132 Pan Pan 0.131 Pan Pan 0.130 Pan Pan 0.129 Pan Pan 0.128 Pan --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...