PT-2005-5259 · Bogofilter · Bogofilter

Publicado 2005-12-31 · Atualizado 2018-10-03 · CVE-2005-4591

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions bogofilter versions 0.93.5 through 0.96.2

Description The issue is related to a heap-based buffer overflow that occurs when using Unicode databases. This happens due to "invalid input sequences" that cause heap corruption when bogofilter or bogolexer converts character sets, potentially allowing remote attackers to cause a denial of service (crash) and possibly execute arbitrary code.

Recommendations For bogofilter versions 0.93.5 through 0.96.2, update to a version that fixes the heap-based buffer overflow issue to prevent potential code execution and denial of service attacks.

Correção

Identificadores relacionados

CVE-2005-4591

Produtos afetados

Bogofilter

Referências · 13

• http://secunia.com/advisories/18427 · Nota
• http://vupen.com/english/advisories/2006/0100 · Nota
• https://osv.dev/vulnerability/CVE-2005-4591 · Aviso do Fabricante
• http://secunia.com/advisories/18717 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-4591 · Aviso do Fabricante
• http://securityfocus.com/bid/16171 · Correção
• http://secunia.com/advisories/18352 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24118 · Nota
• https://usn.ubuntu.com/240-1 · Aviso do Fabricante
• http://lists.suse.com/archive/suse-security-announce/2006-Feb/0001.html · Aviso do Fabricante
• http://bogofilter.sourceforge.net/security/bogofilter-SA-2005-01 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2005-4591 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-4591 · Nota de Segurança