Bug 171345 - CAN-2005-2933 imap buffer overflow
Summary: CAN-2005-2933 imap buffer overflow
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: libc-client
Version: 4
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Joe Orton
QA Contact:
URL:
Whiteboard: impact=moderate,source=idefense,publi...
: 170521 (view as bug list)
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2005-10-20 22:02 UTC by Josh Bressers
Modified: 2007-11-30 22:11 UTC (History)
1 user (show)

Fixed In Version: 2002e-13
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2005-12-08 20:32:15 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)

Description Josh Bressers 2005-10-20 22:02:44 UTC
+++ This bug was initially created as a clone of Bug #171344 +++

iDEFENSE has reported a buffer overflow in the wu-imap server:
http://www.idefense.com/application/poi/display?id=313&type=vulnerabilities

An authenticated user can request a mailbox with a specially crafted name which
will overflow a buffer.

Comment 1 Josh Bressers 2005-10-20 22:03:25 UTC
This issue should also affect FC3

Comment 2 Michal Jaegermann 2005-12-01 19:06:02 UTC
*** Bug 170521 has been marked as a duplicate of this bug. ***

Comment 3 Nalin Dahyabhai 2005-12-08 20:32:15 UTC
Fixing in 2002e-13 for FC3, 2002e-17 for FC4.


Note You need to log in before you can comment on or make changes to this bug.