Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 525
Alerts This Week
Warning Icon 1 525

Gentoo: GLSA-202309-15 Normal: Weex Format String Vulnerability

gentoo
Calendar Grey October 8, 2005
Scroller Gentoo
The Weex package in Gentoo Linux contains a medium severity format string vulnerability that could lead to unauthorized code execution. Please ensure your system is updated.
Weex contains a format string error that may be exploited by malicious servers to execute arbitrary code.

Summary

Gentoo Linux Security Advisory GLSA 200510-09 https://security.gentoo.org/ Severity: Normal Title: Weex: Format string vulnerability Date: October 08, 2005 Bugs: #107849 ID: 200510-09

Synopsis ======= Weex contains a format string error that may be exploited by malicious servers to execute arbitrary code.
Background ========= Weex is a non-interactive FTP client typically used to update web pages.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 net-ftp/weex < 2.6.1.5-r1 >= 2.6.1.5-r1
========== Ulf Harnhammar discovered a format string bug in Weex that can be triggered when it is first run (or when its cache files are rebuilt, using the -r option).
Impact ===...

Read the Full Advisory

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround