Bug 228757 - (CVE-2007-0884) CVE-2007-0884: mimedefang 2.59, 2.60 buffer overflow
CVE-2007-0884: mimedefang 2.59, 2.60 buffer overflow
Status: CLOSED NEXTRELEASE
Product: Fedora
Classification: Fedora
Component: mimedefang (Show other bugs)
6
All Linux
medium Severity medium
: ---
: ---
Assigned To: Robert Scheck
Fedora Extras Quality Assurance
: Security
Depends On:
Blocks:
  Show dependency treegraph
 
Reported: 2007-02-14 15:38 EST by Ville Skyttä
Modified: 2007-11-30 17:11 EST (History)
1 user (show)

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Environment:
Last Closed: 2007-02-15 05:11:34 EST
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---


Attachments (Terms of Use)

  None (edit)
Description Ville Skyttä 2007-02-14 15:38:38 EST
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-0884

"Buffer overflow in Roaring Penguin MIMEDefang 2.59 and 2.60 allows remote
attackers to cause a denial of service (application crash) and possibly execute
arbitrary code via unspecified vectors."

All FE releases are currently at 2.58 - it is unclear to me if that's affected.
 2.61 is available in any case.
Comment 1 Robert Scheck 2007-02-14 15:46:42 EST
"Please note that versions 2.58 and earlier do NOT have the vulnerability." 
(from http://lists.roaringpenguin.com/pipermail/mimedefang/2007-February/
032011.html) - I'll update mimedefang anyway to 2.61.
Comment 2 Robert Scheck 2007-02-15 05:11:34 EST
27596 (mimedefang): Build on target fedora-development-extras succeeded.
27600 (mimedefang): Build on target fedora-6-extras succeeded.
27599 (mimedefang): Build on target fedora-5-extras succeeded.

Building mimedefang for EPEL isn't possible yet as a build requirement package 
is missing - but checked in the update there, too.

Note You need to log in before you can comment on or make changes to this bug.