Weekly edition	Kernel	Security	Distributions	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ

LCDproc: Buffer overflows and format string vulnerabilities

Package(s):

LCDproc

CVE #(s):

Created:

April 27, 2004

Updated:

April 28, 2004

Description:

Due to insufficient checking of client-supplied data, the LCDd server is susceptible to two buffer overflows and one string buffer vulnerability. If the server is configured to listen on all network interfaces (see the Bind parameter in LCDproc configuration), these vulnerabilities can be triggered remotely.

Alerts:

Gentoo

200404-19

2004-04-27

(Log in to post comments)