PT-2007-6113 · Balsa · Balsa

Lubomir Kundrak · Published 2007-09-20 · Updated 2011-03-08 · CVE-2007-5007

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions balsa versions prior to 2.3.20

Description A stack-based buffer overflow issue exists in the ir fetch seq function. This could potentially allow remote IMAP servers to execute arbitrary code by sending a long response to a FETCH command.

Recommendations For versions prior to 2.3.20, update to version 2.3.20 or later to resolve the issue. As a temporary workaround, consider restricting access to the ir fetch seq function until a patch is available.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2007-5007

Affected Products

Balsa

References · 16

• 🔥 http://bugs.gentoo.org/show_bug.cgi?id=193179 · Exploit
• http://gentoo.org/security/en/glsa/glsa-200710-17.xml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-5007 · Security Note
• http://secunia.com/advisories/26947 · Vendor Advisory
• http://secunia.com/advisories/26987 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2007-5007 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2007-5007 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2007-5007 · Vendor Advisory
• http://mail.gnome.org/archives/balsa-list/2007-September/msg00010.html · Patch
• http://novell.com/linux/security/advisories/2007_19_sr.html · Vendor Advisory
• http://securityfocus.com/bid/25777 · Patch
• http://secunia.com/advisories/27272 · Vendor Advisory
• http://bugzilla.gnome.org/show_bug.cgi?id=474366 · Note
• http://vupen.com/english/advisories/2007/3263 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=297581 · Note