Portaudit question

Matthew Seaman m.seaman at infracaninophile.co.uk
Wed Sep 8 08:59:37 PDT 2004

On Wed, Sep 08, 2004 at 10:01:23AM -0500, Chris wrote:
> While running portaudit, I get the complaint;
> Affected package: FreeBSD-502010
> Type of problem: multiple vulnerabilities in the cvs server code.
> Reference: 
> <http://www.FreeBSD.org/ports/portaudit/d2102505-f03d-11d8-81b0-000347a4fa7d.html>
> Note: To disable this check add the uuid to `portaudit_fixed' in 
> /usr/local/etc/portaudit.conf
> Am I to assume this is only if you run a cvs server? OR -
> does this relate to the SA's put out earlier this year about the src.

Did you read the referenced portaudit page or any of the links
supplied by it?  There are several vulnerabilities, most of which
affect the CVS server, but one fairly minor that affects the CVS

The FreeBSD advisory SA-O4:07.cvs refers to a different problem:


As you can see, the VuXML entry you're getting warnings about is dated
a month after the security advisory:


However, the update given in the security advisory is to a version of
CVS unaffected by either vulnerability.  Update your system to the
latest patchlevel and the problem will be fixed.



Dr Matthew J Seaman MA, D.Phil.                       26 The Paddocks
                                                      Savill Way
PGP: http://www.infracaninophile.co.uk/pgpkey         Marlow
Tel: +44 1628 476614                                  Bucks., SL7 1TH UK
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-questions/attachments/20040908/93a947b2/attachment.bin

More information about the freebsd-questions mailing list