Multiple buffer overflows in UMN gopher daemon (gopherd) 2.x and 3.x before 3.0.6 allows attackers to execute arbitrary code via (1) a long filename as a result of a LIST command, and (2) the GSisText function, which calculates the view-type.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Gopherd | University_of_minnesota | 2.0.3 (including) | 2.0.3 (including) |
| Gopherd | University_of_minnesota | 2.0.4 (including) | 2.0.4 (including) |
| Gopherd | University_of_minnesota | 2.3 (including) | 2.3 (including) |
| Gopherd | University_of_minnesota | 2.3.1 (including) | 2.3.1 (including) |
| Gopherd | University_of_minnesota | 3.0.0 (including) | 3.0.0 (including) |
| Gopherd | University_of_minnesota | 3.0.1 (including) | 3.0.1 (including) |
| Gopherd | University_of_minnesota | 3.0.2 (including) | 3.0.2 (including) |
| Gopherd | University_of_minnesota | 3.0.3 (including) | 3.0.3 (including) |
| Gopherd | University_of_minnesota | 3.0.4 (including) | 3.0.4 (including) |
| Gopherd | University_of_minnesota | 3.0.5 (including) | 3.0.5 (including) |