OpenBSD VuXML: Documenting security issues in the OpenBSD Ports & Packages Collection

grip -- CDDB response multiple matches buffer overflow vulnerability

Affected packages
		grip	<	3.0.7p0

Details

VuXML ID	bd003c68-9ae1-11d9-862b-00065bd5b0b6
Discovery	2003-11-02
Entry	2005-03-22

Joseph VanAndel reports that grip is vulnerability to a buffer overflow vulnerability when receiving more than 16 CDDB responses. This could lead to a crash in grip and potentially execution arbitrary code.

A workaround is to disable CDDB lookups.

References

Bugtraq ID	12770
CVE Name	CAN-2005-0706
URL	http://sourceforge.net/tracker/index.php?func=detail&aid=834724&group_id=3714&atid=103714