|
Bugzilla – Full Text Bug Listing |
| Summary: | VUL-0: bogofilter heap overflow | ||
|---|---|---|---|
| Product: | [openSUSE] SUSE LINUX 10.0 | Reporter: | Ludwig Nussel <lnussel> |
| Component: | Security | Assignee: | Security Team bot <security-team> |
| Status: | RESOLVED FIXED | QA Contact: | E-mail List <qa-bugs> |
| Severity: | Normal | ||
| Priority: | P5 - None | CC: | security-team |
| Version: | unspecified | ||
| Target Milestone: | --- | ||
| Hardware: | Other | ||
| OS: | Other | ||
| Whiteboard: | CVE-2005-4592: CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P) | ||
| Found By: | Other | Services Priority: | |
| Business Priority: | Blocker: | --- | |
| Marketing QA Status: | --- | IT Deployment: | --- |
| Attachments: | Patch for version 0.96.2 | ||
Name CVE-2005-4592 (under review)
Status Candidate
Description Heap-based buffer overflow in bogofilter and bogolexer 0.96.2
allows remote attackers to cause a denial of service (crash) and possibly
execute arbitrary code via words that are longer than the input buffer used
by flex.
[14]References
* CONFIRM:http://bogofilter.sourceforge.net/security/bogofilter-SA-2005-02
* BID:16171
* URL:http://www.securityfocus.com/bid/16171
* FRSIRT:ADV-2006-0100
* URL:http://www.frsirt.com/english/advisories/2006/0100
* SECUNIA:18352
* URL:http://secunia.com/advisories/18352
http://bogofilter.sourceforge.net/security/bogofilter-SA-2005-01 and http://bogofilter.sourceforge.net/security/bogofilter-SA-2005-02 suggests to upgrade to 1.0.1. Andreas: Is this ok for all our products? Non other package depends on bogofilter. Fixed package provided to the CODE 10 tree. 1.0.1 builds fine for 9.1, 9.2, 9.3, and 10.0. I'd like to see a patch for this. Created attachment 64518 [details]
Patch for version 0.96.2
SL bogofilter vulnerable CVE-2005-4591 CVE-2005-4592 9.1 0.16.4 no no 9.2 0.92.8 no no 9.3 0.94.12 yes no 10.0 0.95.2 yes no => we only have to care about 9.3 and 10.0 Andreas: I've added the requested patch with comment #6. The patch has to backported for both affected SL products. Backport or version update? Backport Then I hand it over to Ludwig as I don't have the time. Maintenance-Tracker-3410 updates released CVE-2005-4592: CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P) |
The issue is public. Name CVE-2005-4591 (under review) Status Candidate Description Heap-based buffer overflow in bogofilter 0.96.2, 0.95.2, 0.94.14, 0.94.12, and other versions from 0.93.5 to 0.96.2, when using Unicode databases, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via "invalid input sequences" that lead to heap corruption when bogofilter or bogolexer converts character sets. [14]References * CONFIRM:http://bogofilter.sourceforge.net/security/bogofilter-SA-2005-01 * BID:16171 * URL:http://www.securityfocus.com/bid/16171 * FRSIRT:ADV-2006-0100 * URL:http://www.frsirt.com/english/advisories/2006/0100 * SECUNIA:18352 * URL:http://secunia.com/advisories/18352