PT-2005-5259 · Bogofilter · Bogofilter

Published 2005-12-31 · Updated 2018-10-03 · CVE-2005-4591

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions bogofilter versions 0.93.5 through 0.96.2

Description The issue is related to a heap-based buffer overflow that occurs when using Unicode databases. This happens due to "invalid input sequences" that cause heap corruption when bogofilter or bogolexer converts character sets, potentially allowing remote attackers to cause a denial of service (crash) and possibly execute arbitrary code.

Recommendations For bogofilter versions 0.93.5 through 0.96.2, update to a version that fixes the heap-based buffer overflow issue to prevent potential code execution and denial of service attacks.

Fix

Related Identifiers

CVE-2005-4591

Affected Products

Bogofilter

References · 13

• https://osv.dev/vulnerability/CVE-2005-4591 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-4591 · Vendor Advisory
• http://securityfocus.com/bid/16171 · Patch
• http://secunia.com/advisories/18352 · Vendor Advisory
• https://usn.ubuntu.com/240-1 · Vendor Advisory
• http://lists.suse.com/archive/suse-security-announce/2006-Feb/0001.html · Vendor Advisory
• http://bogofilter.sourceforge.net/security/bogofilter-SA-2005-01 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2005-4591 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-4591 · Security Note
• http://secunia.com/advisories/18427 · Note
• http://vupen.com/english/advisories/2006/0100 · Note
• http://secunia.com/advisories/18717 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24118 · Note