Date: Sat, 31 Mar 2007 07:52:48 +0200 From: Gabor Kovesdan <gabor@FreeBSD.org> To: "Simon L. Nielsen" <simon@FreeBSD.org> Cc: freebsd-security@freebsd.org, Thomas Vogt <thomas@bsdunix.ch> Subject: Re: Integer underflow in the "file" program before 4.20 Message-ID: <460DF730.4080803@FreeBSD.org> In-Reply-To: <20070331054103.GA982@zaphod.nitro.dk> References: <1175178178.80069.31.camel@bert.mlan.solnet.ch> <20070331054103.GA982@zaphod.nitro.dk>
next in thread | previous in thread | raw e-mail | index | archive | help
Simon L. Nielsen schrieb: > On 2007.03.29 16:22:58 +0200, Thomas Vogt wrote: > > >> http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1536 >> "Integer underflow in the file_printf function in the "file" program >> before 4.20 allows user-assisted attackers to execute arbitrary code via >> a file that triggers a heap-based buffer overflow." >> >> Is FreeBSD 5.x/6.x affected too? It looks the System has file 4.12. The >> port has 4.20. >> > > Hey, > > While I haven't confirmed FreeBSD is vulnerable, I assume that is the > case. In any case, we (The FreeBSD Security Team) are working on this > isuse. > > In any case, I'd also be happy to see the base file upgraded, since the current one has some known issues. E.g. it coredumps sometimes when using from amavisd-new, while the newer version from ports works well. Gabor
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?460DF730.4080803>