Red Hat Security AdvisoryRHSA-2008:0946
ed security update
Released 2008-10-21 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 ed-0.2-33.30E.1, ed-0.2-33.30E.1.i386
- Red Hat Enterprise Linux (v. 5 server) ed-0.2-39.el5_2, ed-0.2-39.el5_2.i386, ed-0.2-39.el5_2.ia64 +1
- Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ed-0.2-21.1, ed-0.2-21.1.i386, ed-0.2-21.1.ia64
- Red Hat Enterprise Linux AS version 3 ed-0.2-33.30E.1, ed-0.2-33.30E.1.i386, ed-0.2-33.30E.1.ia64 +1
- Red Hat Enterprise Linux AS version 4 ed-0.2-36.el4_7.1, ed-0.2-36.el4_7.1.i386, ed-0.2-36.el4_7.1.ia64 +1
- Red Hat Enterprise Linux Desktop (v. 5 client) ed-0.2-39.el5_2, ed-0.2-39.el5_2.i386
- Red Hat Enterprise Linux Desktop version 4 ed-0.2-36.el4_7.1, ed-0.2-36.el4_7.1.i386
- Red Hat Enterprise Linux ES version 2.1 ed-0.2-21.1, ed-0.2-21.1.i386
- Red Hat Enterprise Linux ES version 3 ed-0.2-33.30E.1, ed-0.2-33.30E.1.i386, ed-0.2-33.30E.1.ia64
- Red Hat Enterprise Linux ES version 4 ed-0.2-36.el4_7.1, ed-0.2-36.el4_7.1.i386, ed-0.2-36.el4_7.1.ia64
- Red Hat Enterprise Linux WS version 2.1 ed-0.2-21.1, ed-0.2-21.1.i386
- Red Hat Enterprise Linux WS version 3 ed-0.2-33.30E.1, ed-0.2-33.30E.1.i386, ed-0.2-33.30E.1.ia64
- Red Hat Enterprise Linux WS version 4 ed-0.2-36.el4_7.1, ed-0.2-36.el4_7.1.i386, ed-0.2-36.el4_7.1.ia64
- Red Hat Linux Advanced Workstation 2.1 ed-0.2-21.1, ed-0.2-21.1.ia64
Fixes 1 record
Priority MEDIUM 46
Heap-based buffer overflow in the strip_escapes function in signal.c in GNU ed before 1.0 allows context-dependent or user-assisted attackers to execute arbitrary code via a long filename.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.03595 · Published 2008-09-04 · Fixed CWE-119
