Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 149755

Summary: Remote buffer overflow in the digestmd5.c
Product: [Retired] Fedora Legacy Reporter: Leonard den Ottolander <leonard-rh-bugzilla>
Component: cyrus-saslAssignee: Fedora Legacy Bugs <bugs>
Status: CLOSED NOTABUG QA Contact:
Severity: medium Docs Contact:
Priority: medium    
Version: fc1Keywords: Security
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
URL: http://www.gentoo.org/security/en/glsa/glsa-200410-05.xml
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2005-03-01 22:03:13 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Leonard den Ottolander 2005-02-25 22:03:57 UTC
http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0373

Affects RHL 9 and FC 1. Please check whether it affects RHL 7.3.

Comment 2 Leonard den Ottolander 2005-02-28 22:05:55 UTC
https://bugzilla.andrew.cmu.edu/cgi-bin/cvsweb.cgi/src/sasl/plugins/digestmd5.c#rev1.171
:

        * plugins/digestmd5.c: Fix potential buffer overflow, call
          add_to_challenge in 2 more places (Alexey Melnikov

So indeed the issue seems to be the sprintf(text->outbuf)s, not the
quoting.


Comment 3 Leonard den Ottolander 2005-03-01 22:03:13 UTC
Alexey Melnikov verified that this issue only exists in rev 1.170 of
digestmd5.c. Official releases are hence not vulnerable.

Closing NOTABUG.