Gypsy Information Disclosure and Buffer Overflow Vulnerabilities

Bugtraq ID:	46013
Class:	Unknown
CVE:	CVE-2011-0523 CVE-2011-0524
Remote:	No
Local:	Yes
Published:	Jan 24 2011 12:00AM
Updated:	May 07 2015 05:11PM
Credit:	Kees Cook
Vulnerable:	Gypsy Gypsy 0
Not Vulnerable:

Gypsy Information Disclosure and Buffer Overflow Vulnerabilities

Gypsy is prone to an information-disclosure vulnerability and multiple buffer-overflow vulnerabilities.

Successful exploits can allow attackers to obtain sensitive information or to execute arbitrary code in the context of the affected application. Failed attempts may lead to a denial-of-service condition.

Gypsy Information Disclosure and Buffer Overflow Vulnerabilities

Currently, we are not aware of any working exploits . If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Gypsy Information Disclosure and Buffer Overflow Vulnerabilities

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Gypsy Information Disclosure and Buffer Overflow Vulnerabilities

References:

• Gypsy Homepage (Gypsy)
  
• FreeDesktop Bugzilla �?? Bug 33431 Vulnerability Reference Page (Mozilla)