Multiple buffer overflows in UMN gopher daemon (gopherd) 2.x and 3.x before 3.0.6 allows attackers to execute arbitrary code via (1) a long filename as a result of a LIST command, and (2) the GSisText function, which calculates the view-type.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Gopherd | University_of_minnesota | 2.0.3 (including) | 2.0.3 (including) |
| Gopherd | University_of_minnesota | 2.0.4 (including) | 2.0.4 (including) |
| Gopherd | University_of_minnesota | 2.3 (including) | 2.3 (including) |
| Gopherd | University_of_minnesota | 2.3.1 (including) | 2.3.1 (including) |
| Gopherd | University_of_minnesota | 3.0.0 (including) | 3.0.0 (including) |
| Gopherd | University_of_minnesota | 3.0.1 (including) | 3.0.1 (including) |
| Gopherd | University_of_minnesota | 3.0.2 (including) | 3.0.2 (including) |
| Gopherd | University_of_minnesota | 3.0.3 (including) | 3.0.3 (including) |
| Gopherd | University_of_minnesota | 3.0.4 (including) | 3.0.4 (including) |
| Gopherd | University_of_minnesota | 3.0.5 (including) | 3.0.5 (including) |
References
- http://marc.info/?l=bugtraq\u0026m=105804485302211\u0026w=2
- http://marc.info/?l=bugtraq\u0026m=106123498310717\u0026w=2
- http://www.debian.org/security/2003/dsa-387
- http://marc.info/?l=bugtraq\u0026m=105804485302211\u0026w=2
- http://marc.info/?l=bugtraq\u0026m=106123498310717\u0026w=2
- http://www.debian.org/security/2003/dsa-387