cvs commit: ports/security/vuxml vuln.xml

[Remko Lodder]

remko       2005-08-19 09:58:20 UTC

  FreeBSD ports repository (doc committer)

  Modified files:
    security/vuxml       vuln.xml 
  Log:
  Document four vulnerabilities in openvpn:
  
  * openvpn -- multiple TCP clients connecting with the same certificate at the same time can crash the server
  * openvpn -- denial of service: malicious authenticated "tap" client can deplete server virtual memory
  * openvpn -- denial of service: undecryptable packet from authorized client can disconnect unrelated clients
  * openvpn -- denial of service: client certificate validation can disconnect unrelated clients
  
  Approved by:    portsmgr (blanket VuXML)
  Submitted by:   Matthias Andree <matthias dot andree at gmx dot de>
  
  Revision  Changes    Path
  1.794     +124 -1    ports/security/vuxml/vuln.xml