Bug 86598

Summary:	CAN-2002-1362 mICQ remote crash
Product:	Red Hat Enterprise Linux 2.1	Reporter:	Mark J. Cox <mjc>
Component:	micq	Assignee:	Thomas Woerner <twoerner>
Status:	CLOSED ERRATA	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	2.1	Keywords:	Security
Target Milestone:	---
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2003-05-30 08:36:54 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Mark J. Cox 2003-03-26 09:04:56 UTC

mICQ 0.4.9 and earlier allows remote attackers to cause a denial of service
(crash) via malformed ICQ message types without a 0xFE separator character.

We will provide erratum packages containing mICQ version 0.4.10.2 which is not
vulnerable to this issue. 

This will be RHSA-2003:119, CAN-2002-1362

Comment 1 Mark J. Cox 2003-05-30 08:36:54 UTC

Erratum was released in April
http://rhn.redhat.com/errata/RHSA-2003-119.html