ports/116509: Incorrect vulnerabilities count in portaudit

Fri Sep 21 11:00:05 UTC 2007

>Number:         116509
>Category:       ports
>Synopsis:       Incorrect vulnerabilities count in portaudit
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    freebsd-ports-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Fri Sep 21 11:00:04 GMT 2007
>Closed-Date:
>Last-Modified:
>Originator:     Ivan Lago
>Release:        FreeBSD 6.2-RELEASE-p6 amd64
>Organization:
European Institute of Oncology
>Environment:
System: FreeBSD sodio.ifom-ieo-campus.it 6.2-RELEASE-p6 FreeBSD 6.2-RELEASE-p6 #8: Tue Jul 24 17:16:37 CEST 2007 root at sodio.ifom-ieo-campus.it:/usr/obj/usr/src/sys/SODIO amd64

>Description:
Launching portaudit with a precise port as argument reports an incorrect problems count. It seems to count the number of vulnerable packages but not the number of problems, as the generated footer seems to suggest

>How-To-Repeat:
root at sodio:~ portaudit apache-2.0.54_4
Affected package: apache-2.0.54_4
Type of problem: apache -- multiple vulnerabilities.
Reference: <http://www.FreeBSD.org/ports/portaudit/c115271d-602b-11dc-898c-001921ab2fa4.html>

Affected package: apache-2.0.54_4
Type of problem: apache -- mod_rewrite buffer overflow vulnerability.
Reference: <http://www.FreeBSD.org/ports/portaudit/dc8c08c7-1e7c-11db-88cf-000c6ec775d9.html>

Affected package: apache-2.0.54_4
Type of problem: apache -- mod_imap cross-site scripting flaw.
Reference: <http://www.FreeBSD.org/ports/portaudit/9fff8dc8-7aa7-11da-bf72-00123f589060.html>

1 problem(s) found.

>Fix:

>Release-Note:
>Audit-Trail:
>Unformatted: