From owner-freebsd-ports-bugs@FreeBSD.ORG Mon Dec 29 07:30:03 2008 Return-Path: Delivered-To: freebsd-ports-bugs@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 7175C1065676 for ; Mon, 29 Dec 2008 07:30:03 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id 4557C8FC1C for ; Mon, 29 Dec 2008 07:30:03 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.14.3/8.14.3) with ESMTP id mBT7U2En046352 for ; Mon, 29 Dec 2008 07:30:02 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.3/8.14.3/Submit) id mBT7U2ah046351; Mon, 29 Dec 2008 07:30:02 GMT (envelope-from gnats) Resent-Date: Mon, 29 Dec 2008 07:30:02 GMT Resent-Message-Id: <200812290730.mBT7U2ah046351@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-ports-bugs@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, Mark Foster Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 6DBAA106564A for ; Mon, 29 Dec 2008 07:21:14 +0000 (UTC) (envelope-from mdf@frau.foster.cc) Received: from smtp.foster.cc (durango.foster.cc [208.75.57.131]) by mx1.freebsd.org (Postfix) with ESMTP id 4F4CE8FC13 for ; Mon, 29 Dec 2008 07:21:14 +0000 (UTC) (envelope-from mdf@frau.foster.cc) Received: from localhost (localhost [127.0.0.1]) by smtp.foster.cc (Postfix) with ESMTP id 3C760490A9 for ; Sun, 28 Dec 2008 22:58:07 -0800 (PST) Received: from smtp.foster.cc ([127.0.0.1]) by localhost (smtp.foster.cc [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2OoLWjObl4Iu for ; Sun, 28 Dec 2008 22:58:06 -0800 (PST) Received: from frau.foster.cc (frau.foster.cc [10.1.112.40]) by smtp.foster.cc (Postfix) with ESMTP id 76A2B470BB for ; Sun, 28 Dec 2008 22:58:06 -0800 (PST) Received: by frau.foster.cc (Postfix, from userid 1001) id 50358BBC3; Sun, 28 Dec 2008 22:34:01 -0800 (PST) Message-Id: <20081229063401.50358BBC3@frau.foster.cc> Date: Sun, 28 Dec 2008 22:34:01 -0800 (PST) From: Mark Foster To: FreeBSD-gnats-submit@FreeBSD.org X-Send-Pr-Version: 3.113 Cc: Subject: ports/130013: vuxml update: vuln.xml entry for ports/foo X-BeenThere: freebsd-ports-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Ports bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 29 Dec 2008 07:30:03 -0000 >Number: 130013 >Category: ports >Synopsis: vuxml update: vuln.xml entry for ports/foo >Confidential: no >Severity: serious >Priority: low >Responsible: freebsd-ports-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: update >Submitter-Id: current-users >Arrival-Date: Mon Dec 29 07:30:02 UTC 2008 >Closed-Date: >Last-Modified: >Originator: Mark Foster >Release: FreeBSD 7.0-RELEASE-p5 i386 >Organization: >Environment: System: FreeBSD frau.foster.cc 7.0-RELEASE-p5 FreeBSD 7.0-RELEASE-p5 #0: Sat Nov 1 15:07:32 PDT 2008 root@frau.foster.cc:/usr/obj/usr/src/sys/VMWARE2 i386 >Description: >How-To-Repeat: >Fix: imap-uw -- University Of Washington IMAP c-client Buffer Overflow imap-uw 2007e

SANS reports:

The University of Washington IMAP library is a library implementing the IMAP mail protocol. University of Washington IMAP is exposed to a buffer overflow issue that occurs due to a boundary error within the rfc822_output_char function in the c-client library. The University of Washington IMAP library versions prior to 2007e are affected.

 http://www.washington.edu/imap/documentation/RELNOTES.html CVE-2008-5514 2008-12-16 2008-12-28 >Release-Note: >Audit-Trail: >Unformatted: