ed: Heap-based buffer overflow (arb. code execution)

Heap-based buffer overflow in the stripescapes function in signal.c in GNU ed before 1.0 allows context-dependent or user-assisted attackers to execute arbitrary code via a long filename. NOTE: since ed itself does not typically run with special privileges, this issue only crosses privilege...

GLSA-200809-15 : GNU ed: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200809-15 GNU ed: User-assisted execution of arbitrary code Alfredo Ortega from Core Security Technologies reported a heap-based buffer overflow in the stripescapes function when processing overly long filenames. Impact : A remote...

Gentoo Security Advisory GLSA 200809-15 (ed)

The remote host is missing updates announced in advisory GLSA 200809-15. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

GNU ed: User-assisted execution of arbitrary code

Background GNU ed is a basic line editor. red is a restricted version of ed that does not allow shell command execution. Description Alfredo Ortega from Core Security Technologies reported a heap-based buffer overflow in the stripescapes function when processing overly long filenames. Impact A...

CVE-2008-3916

Heap-based buffer overflow in the stripescapes function in signal.c in GNU ed before 1.0 allows context-dependent or user-assisted attackers to execute arbitrary code via a long filename. NOTE: since ed itself does not typically run with special privileges, this issue only crosses privilege...

Heap overflow

Heap-based buffer overflow in the stripescapes function in signal.c in GNU ed before 1.0 allows context-dependent or user-assisted attackers to execute arbitrary code via a long filename. NOTE: since ed itself does not typically run with special privileges, this issue only crosses privilege...

CVE-2008-3916

Heap-based buffer overflow in the stripescapes function in signal.c in GNU ed before 1.0 allows context-dependent or user-assisted attackers to execute arbitrary code via a long filename. NOTE: since ed itself does not typically run with special privileges, this issue only crosses privilege...

DEBIAN-CVE-2008-3916

Heap-based buffer overflow in the stripescapes function in signal.c in GNU ed before 1.0 allows context-dependent or user-assisted attackers to execute arbitrary code via a long filename. NOTE: since ed itself does not typically run with special privileges, this issue only crosses privilege...

CVE-2008-3916

Heap-based buffer overflow in the stripescapes function in signal.c in GNU ed before 1.0 allows context-dependent or user-assisted attackers to execute arbitrary code via a long filename. NOTE: since ed itself does not typically run with special privileges, this issue only crosses privilege...

CVE-2008-3916

Heap-based buffer overflow in the stripescapes function in signal.c in GNU ed before 1.0 allows context-dependent or user-assisted attackers to execute arbitrary code via a long filename. NOTE: since ed itself does not typically run with special privileges, this issue only crosses privilege...

CVE-2008-3916

CVE-2008-3916 : Heap-based buffer overflow in the strip_escapes function of GNU ed (signal.c) allows context-dependent or user-assisted code execution via a long filename. Affects ed before 1.0; privilege boundaries may be crossed when ed is invoked as a third-party component. Several vendors rel...

Debian Security Advisory DSA 001-1 (ed)

The remote host is missing an update to ed announced via advisory DSA 001-1. OpenVAS Vulnerability Test $Id: deb0011.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 001-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 001-1 (ed)

The remote host is missing an update to ed announced via advisory DSA 001-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GNU Ed不安全临时文件建立漏洞

GNU ed是一个8字节适用、POSIX 兼容的行编辑器。 GNU ed不正确建立临时文件，本地攻击者可以利用漏洞进行拒绝服务或提升特权攻击。 由于不安全建立临时文件，通过符号攻击，可导致以当前用户权限破坏系统文件，或者提升为当前用户特权。 GNU Ed 可联系供应商获得补丁信息： http://www.gnu.org/software/ed/ed.html...

CVE-2006-6939

GNU ed before 0.3 allows local users to overwrite arbitrary files via a symlink attack on temporary files, possibly in the opensbuf function...

CVE-2006-6939

GNU ed before 0.3 allows local users to overwrite arbitrary files via a symlink attack on temporary files, possibly in the opensbuf function...

CVE-2006-6939

GNU ed before 0.3 allows local users to overwrite arbitrary files via a symlink attack on temporary files, possibly in the opensbuf function...

CVE-2006-6939

GNU ed before 0.3 allows local users to overwrite arbitrary files via a symlink attack on temporary files, possibly in the opensbuf function...

CVE-2006-6939

The CVE-2006-6939 issue affects GNU ed prior to 0.3, where a symlink attack on temporary files (likely in open_sbuf) allows local users to overwrite arbitrary files. Fedora advisories/Fedora updates for ed (e.g., ed 0.3-0.fc6/0.fc5) address this by rebuilding with fixes for CVE-2006-6939. The Ope...

CVE-2000-1137

CVE-2000-1137 affects GNU ed prior to 0.2-18.1. The issue arises from insecure temporary file handling, allowing a local user to influence files owned by others via a symlink attack in world-writable temporary directories. Consequence: potential local file overwrite or access when ed is invoked. ...