[Bug 217422] New: CVE-2006-0804: tin <= 1.8.0 arbitrary code execution vulnerability

[Red Hat Bugzilla]

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug report.




https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=217422

           Summary: CVE-2006-0804: tin <= 1.8.0 arbitrary code execution
                    vulnerability
           Product: Fedora Extras
           Version: fc3
          Platform: All
        OS/Version: Linux
            Status: NEW
          Severity: normal
          Priority: normal
         Component: tin
        AssignedTo: adrian(a)lisas.de
        ReportedBy: ville.skytta(a)iki.fi
         QAContact: extras-qa(a)fedoraproject.org
                CC: extras-qa(a)fedoraproject.org,fedora-security-
                    list(a)redhat.com


http://nvd.nist.gov/nvd.cfm?cvename=CVE-2006-0804

"Off-by-one error in TIN 1.8.0 and earlier might allow attackers to execute
arbitrary code via unknown vectors that trigger a buffer overflow."

Based on the version numbers, FE-3 seems affected.

-- 
Configure bugmail: https://bugzilla.redhat.com/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.