CVE and update status of the FreeBSD ports tree4,526 unaddressed CVEs in 616 portsAll times are CET

Port details

security/dotdotpwn3.0.2_2

Fuzzer to discover traversal directory vulnerabilities

Maintainer
rihaz.jerrin@gmail.com
Packages
dotdotpwn 3.0.2_2
Upstream
up to date
CPE
none, CVEs only via VuXML
WWW
https://github.com/wireghoul/dotdotpwn
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (0)

No VuXML entries for this package.

Commits (10)

Stefan Eßer (se) · 3.0.2_2
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 3.0.2_2
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Mathieu Arnold (mat) · 3.0.2_2
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Mathieu Arnold (mat) · 3.0.2_2
Remove # $FreeBSD$ from Makefiles.
305f148f48
Tobias Kortkamp (tobik) · 3.0.2_2
security/dotdotpw: Actually commit pkg-descr changes after r514780
43046f60ac
Tobias Kortkamp (tobik) · 3.0.2_2
security/dotdotpwn: Spell NMAP_RUN_DEPENDS correctly

While here

- Stop shouting NMAP_DESC
- Pet portclippy while here
- Clean up SHEBANG_FILES
- Fix LICENSE
- Install license via license framework
- Reformat pkg-descr
a8221578db
Jimmy Olgeni (olgeni) · 3.0.2_1
Fix whitespace issues (mixed tab/spaces, alignment) in a few ports.
2fb9f25373
Sunpoet Po-Chuan Hsieh (sunpoet) · 3.0.2_1
Remove Perl core modules

- While I'm here:
  - Remove MASTER_SITES
  - Add missing OPTIONS_DEFINE=DOCS
  - Fix indent
  - Convert to options target helper
- Bump PORTREVISION for dependency change

With hat:	perl
fafc780260
Mathieu Arnold (mat) · 3.0.2
Whatever you do, ${PORTSDIR}/ keeps creeping back.

Sponsored by:	Absolight
74a3b89bf6
Kurt Jaeger (pi) · 3.0.2
New port: security/dotdotpwn

DotDotPwn - The Directory Traversal Fuzzer

It's a very flexible intelligent
fuzzer to discover traversal directory
vulnerabilities in software such as HTTP/FTP/TFTP
servers, Web platforms such as CMSs,
ERPs, Blogs, etc.

Also, it has a protocol-independent
module to send the desired payload to
the host and port specified. On the
other hand, it also could be used in
a scripting way using the STDOUT module.

It's written in perl programming
language and can be run either under
*NIX or Windows platforms.

WWW: https://github.com/wireghoul/dotdotpwn

PR:		209323
Submitted by:	Rihaz Jerrin <rihaz.jerrin@gmail.com>
2736234346