LWN.net Logo

Not logged in

Log in now

Create an account

Subscribe to LWN

Sponsored link

Vyatta – Linux & Open Source Alternative to Cisco – Advanced Routing, Firewall, VPN, QoS..
Free Download ->

Recent Features

LWN.net Weekly Edition for November 20, 2008

MinGW and why Linux users should care

LWN.net Weekly Edition for November 13, 2008

NLUUG/ELCE: Embedded devices and free software

The sad story of the em28xx driver

Printable page
Weekly edition Kernel Security Distributions Search
Archives Calendar Subscribe Write for LWN LWN.net FAQ

yelp: format string vulnerability

Package(s):yelp CVE #(s):CVE-2008-3533
Created:August 21, 2008 Updated:November 7, 2008
Description: From the Mandriva alert: A format string vulnerability was discovered in yelp after version 2.19.90 and before 2.24 that could allow remote attackers to execute arbitrary code via format string specifiers in an invalid URI on the command-line or via URI helpers in Firefox, Evolution, or possibly other programs,
Alerts:
Mandriva MDVSA-2008:175 2008-08-20
Ubuntu USN-638-1 2008-08-27
Gentoo 200809-01 2008-09-04
Fedora FEDORA-2008-7293 2008-09-05
SuSE SUSE-SR:2008:024 2008-11-07
(Log in to post comments)

Copyright © 2008, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds