Description
Multiple stack-based buffer overflows in University of Minnesota gopher client 3.0.9 allow remote malicious servers to execute arbitrary code via (1) a long "+VIEWS:" reply, which is not properly handled in the VIfromLine function, and (2) certain arguments when launching third party programs such as a web browser from a web link, which is not properly handled in the FIOgetargv function.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Exploit-DB 1
- Gopher 3.0.9 - '+VIEWS' Client-Side Buffer Overflow EDB-1187 · local · Aug 30, 2005 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 1
- DSA-832-1 gopher - buffer overflows Debian Security (DSA / DLA) · Mar 9, 2026
References
- 20050901 UMN gopher[v3.0.9+] multiple(2) client buffer overflows. mailing-list
- VU#619812 third-party-advisory
- DSA-832 vendor-advisory
- 14693 vdb-entry
- 16614 third-party-advisory
- 17016 third-party-advisory
- umn-gopher-vifromline-bo(22053) vdb-entry