Bug 667478 (CVE-2010-1677)

Summary:	CVE-2010-1677 mhonarc: remote DoS via certain tags
Product:	[Other] Security Response	Reporter:	Vincent Danen <vdanen>
Component:	vulnerability	Assignee:	Red Hat Product Security <security-response-team>
Status:	CLOSED ERRATA	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	unspecified	CC:	jamatos, tremble
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2021-10-19 21:47:04 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	664730, 667483, 928096
Bug Blocks:

Description Vincent Danen 2011-01-05 18:21:55 UTC

Common Vulnerabilities and Exposures assigned an identifier CVE-2010-1677 to
the following vulnerability:

Name: CVE-2010-1677
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1677
Assigned: 20100430
Reference: MLIST:[mhonarc-dev] 20101230 [bug #32014] CVE-2010-1677: DoS when processing html messages with deep tag nesting
Reference: URL: http://www.mail-archive.com/mhonarc-dev@mhonarc.org/msg01297.html
Reference: CONFIRM: http://savannah.nongnu.org/bugs/?32014
Reference: VUPEN:ADV-2010-3344
Reference: URL: http://www.vupen.com/english/advisories/2010/3344

MHonArc 2.6.16 allows remote attackers to cause a denial of service
(CPU consumption) via start tags that are placed within other start
tags, as demonstrated by a <bo<bo<bo<bo<body>dy>dy>dy>dy> sequence, a
different vulnerability than CVE-2010-4524.

Comment 2 Vincent Danen 2011-01-05 18:36:57 UTC

Created mhonarc tracking bugs for this issue

Affects: fedora-all [bug 664730]

Comment 3 Vincent Danen 2013-03-26 21:23:58 UTC

Created mhonarc tracking bugs for this issue

Affects: epel-all [bug 928096]

Comment 4 Vincent Danen 2013-03-26 21:24:19 UTC

Current Fedora has the fixed 2.6.18 version, but current EPEL still ships the vulnerable 2.6.16 version.