Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

Pound: buffer overflow

Package(s):

pound

CVE #(s):

CVE-2005-1391

Created:

May 2, 2005

Updated:

January 10, 2006

Description:

Steven Van Acker has discovered a buffer overflow vulnerability in the "add_port()" function in Pound 1.8.2+. A remote attacker could send a request for an overly long hostname parameter, which could lead to the remote execution of arbitrary code with the rights of the Pound daemon process.

Alerts:

Gentoo

200504-29

2005-04-30

(Log in to post comments)