Login
Newsletter
Werbung

Sicherheit: Pufferüberlauf in bogofilter
Aktuelle Meldungen Distributionen
Name: Pufferüberlauf in bogofilter
ID: USN-240-1
Distribution: Ubuntu
Plattformen: Ubuntu 5.10
Datum: Mi, 11. Januar 2006, 18:20
Referenzen: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4591
Applikationen: bogofilter

Originalnachricht


--===============1582277227==
Content-Type: multipart/signed; micalg=pgp-sha1;
protocol="application/pgp-signature";
boundary="oC1+HKm2/end4ao3"
Content-Disposition: inline


--oC1+HKm2/end4ao3
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline

===========================================================
Ubuntu Security Notice USN-240-1 January 11, 2006
bogofilter vulnerability
CVE-2005-4591
===========================================================

A security issue affects the following Ubuntu releases:

Ubuntu 5.10 (Breezy Badger)

The following packages are affected:

bogofilter

The problem can be corrected by upgrading the affected package to
version 0.95.2-1ubuntu1.1. In general, a standard system upgrade is
sufficient to effect the necessary changes.

Details follow:

A buffer overflow was found in bogofilter's character set conversion
handling. Certain invalid UTF-8 character sequences caused an invalid
memory access. By sending a specially crafted email, a remote attacker
could exploit this to crash bogofilter or possibly even execute
arbitrary code with bogofilter's privileges.


Source archives:

bogofilter_0.95.2-1ubuntu1.1.diff.gz
Size/MD5: 10848 a3a01223665479ed500aee9b64d9669a
bogofilter_0.95.2-1ubuntu1.1.dsc
Size/MD5: 638 bfedbfb65a22f9a482bfa1356a7bd761
bogofilter_0.95.2.orig.tar.gz
Size/MD5: 866258 bdca7acd8cccff1976ab2ceab075830a

amd64 architecture (Athlon64, Opteron, EM64T Xeon)

bogofilter-bdb_0.95.2-1ubuntu1.1_amd64.deb
Size/MD5: 291350 8173d4c3d9c06420655d6b50c43c5b44
bogofilter-common_0.95.2-1ubuntu1.1_amd64.deb
Size/MD5: 136588 f9ce89c4857c0d764100a72e22620a28
bogofilter_0.95.2-1ubuntu1.1_amd64.deb
Size/MD5: 942 c4583a7d5ed114d1b23bdda9dff0b7db

i386 architecture (x86 compatible Intel/AMD)

bogofilter-bdb_0.95.2-1ubuntu1.1_i386.deb
Size/MD5: 237316 62e0348f1907d35d2a990a2c69543fb6
bogofilter-common_0.95.2-1ubuntu1.1_i386.deb
Size/MD5: 136590 acbfe94471e877359dc0e910d9be52eb
bogofilter_0.95.2-1ubuntu1.1_i386.deb
Size/MD5: 944 58e0b7482f9bc1a885940bfbf5d4c2ff

powerpc architecture (Apple Macintosh G3/G4/G5)

bogofilter-bdb_0.95.2-1ubuntu1.1_powerpc.deb
Size/MD5: 272064 05edb162837021bbcde1d6a3c7b5f1b4
bogofilter-common_0.95.2-1ubuntu1.1_powerpc.deb
Size/MD5: 136574 404fc07951bb7e614a55f15f6be9460c
bogofilter_0.95.2-1ubuntu1.1_powerpc.deb
Size/MD5: 946 a4fefa7122015cad56364bb27e29baeb

--oC1+HKm2/end4ao3
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)

iD8DBQFDxTrrDecnbV4Fd/IRAsEMAJ99pqBBhWBx5PsXA54L9QE8lYpUSwCgoFtE
U0b3woYLSp4dhfRIy/AqokI=
=6v2B
-----END PGP SIGNATURE-----

--oC1+HKm2/end4ao3--


--===============1582277227==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

--
ubuntu-security-announce mailing list
ubuntu-security-announce@lists.ubuntu.com
http://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce

--===============1582277227==--
Pro-Linux
Unterstützer werden
Neue Nachrichten
Werbung