University Of Minnesota Gopher vulnerabilities

CVE-2005-2772 [HIGH] CVE-2005-2772: Multiple stack-based buffer overflows in University of Minnesota gopher client 3.0.9 allow remote ma Multiple stack-based buffer overflows in University of Minnesota gopher client 3.0.9 allow remote malicious servers to execute arbitrary code via (1) a long "+VIEWS:" reply, which is not properly handled in the VIfromLine function, and (2) certain arguments when launching third party programs such as a web browser from a web link, which is not properly handled

CVE-2003-0805 [HIGH] CVE-2003-0805: Multiple buffer overflows in UMN gopher daemon (gopherd) 2 Multiple buffer overflows in UMN gopher daemon (gopherd) 2.x and 3.x before 3.0.6 allows attackers to execute arbitrary code via (1) a long filename as a result of a LIST command, and (2) the GSisText function, which calculates the view-type.

CVE-2004-0560 [HIGH] CVE-2004-0560: Integer overflow in gopher daemon (gopherd) 3 Integer overflow in gopher daemon (gopherd) 3.0.3 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted content of a certain size that triggers the overflow.

CVE-2004-0561 [HIGH] CVE-2004-0561: Format string vulnerability in the log routine for gopher daemon (gopherd) 3 Format string vulnerability in the log routine for gopher daemon (gopherd) 3.0.3 allows remote attackers to cause a denial of service and possibly execute arbitrary code.

CVE-2005-1853 [HIGH] CVE-2005-1853: gopher.c in the Gopher client 3.0.5 does not properly create temporary files, which allows local use gopher.c in the Gopher client 3.0.5 does not properly create temporary files, which allows local users to gain privileges.