FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2004-0353

This CVE name corresponds to:

Entered	Topic
2004-03-06	GNU Anubis buffer overflows and format string vulnerabilities

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2004-0353 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2004-0353
Phase	Proposed(20040318)

Description

Multiple buffer overflows in auth_ident() function in auth.c for GNU Anubis 3.6.0 through 3.6.2, 3.9.92 and 3.9.93 allow remote attackers to gain privileges via a long string.

References

Source	Reference
BUGTRAQ	20040304 GNU Anubis buffer overflows and format string bugs
MLIST	[bug-anubis] 20040228 Important security update
BUGTRAQ	20040310 GNU Anubis 3.6.2 remote root exploit
BID	9772
XF	anubis-ident-bo(15345)