PT-2007-6113 · Balsa · Balsa

Lubomir Kundrak · Publicado 2007-09-20 · Atualizado 2011-03-08 · CVE-2007-5007

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions balsa versions prior to 2.3.20

Description A stack-based buffer overflow issue exists in the ir fetch seq function. This could potentially allow remote IMAP servers to execute arbitrary code by sending a long response to a FETCH command.

Recommendations For versions prior to 2.3.20, update to version 2.3.20 or later to resolve the issue. As a temporary workaround, consider restricting access to the ir fetch seq function until a patch is available.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2007-5007

Produtos afetados

Balsa

Referências · 16

• 🔥 http://bugs.gentoo.org/show_bug.cgi?id=193179 · Exploit
• http://gentoo.org/security/en/glsa/glsa-200710-17.xml · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2007-5007 · Nota de Segurança
• http://secunia.com/advisories/26947 · Aviso do Fabricante
• http://secunia.com/advisories/26987 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2007-5007 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2007-5007 · Aviso do Fabricante
• http://bugzilla.gnome.org/show_bug.cgi?id=474366 · Nota
• http://vupen.com/english/advisories/2007/3263 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2007-5007 · Aviso do Fabricante
• http://mail.gnome.org/archives/balsa-list/2007-September/msg00010.html · Correção
• http://novell.com/linux/security/advisories/2007_19_sr.html · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=297581 · Nota
• http://securityfocus.com/bid/25777 · Correção
• http://secunia.com/advisories/27272 · Aviso do Fabricante