Bogofilter EMail Filter Remote Quoted Printable Decoder Denial Of Service Vulnerability
BID:11568
Info
Bogofilter EMail Filter Remote Quoted Printable Decoder Denial Of Service Vulnerability
| Bugtraq ID: | 11568 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2004-1007 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 01 2004 12:00AM |
| Updated: | Mar 19 2015 08:31AM |
| Credit: | Antti-Juhani Kaijanaho is credited with the discovery of this issue. |
| Vulnerable: |
Ubuntu Ubuntu Linux 4.1 ppc Ubuntu Ubuntu Linux 4.1 ia64 Ubuntu Ubuntu Linux 4.1 ia32 Bogofilter Project Email Filter 0.92.7 Bogofilter Project Email Filter 0.92.6 Bogofilter Project Email Filter 0.92.4 Bogofilter Project Email Filter 0.92 Bogofilter Project Email Filter 0.9 .0.5 Bogofilter Project Email Filter 0.9 .0.4 Bogofilter Project Email Filter 0.9 .0.3 |
| Not Vulnerable: |
Bogofilter Project Email Filter 0.92.8 |
Discussion
Bogofilter EMail Filter Remote Quoted Printable Decoder Denial Of Service Vulnerability
A remote quoted printable decoder denial of service vulnerability reportedly affects Bogofilter. This issue is due to a failure of the application to handle malformed email headers.
An attacker can leverage this issue to cause the affected email filter to crash, denying service to all legitimate users.
A remote quoted printable decoder denial of service vulnerability reportedly affects Bogofilter. This issue is due to a failure of the application to handle malformed email headers.
An attacker can leverage this issue to cause the affected email filter to crash, denying service to all legitimate users.
Exploit / POC
Bogofilter EMail Filter Remote Quoted Printable Decoder Denial Of Service Vulnerability
No exploit is required to leverage this issue.
No exploit is required to leverage this issue.
Solution / Fix
Bogofilter EMail Filter Remote Quoted Printable Decoder Denial Of Service Vulnerability
Solution:
The vendor has released an upgrade dealing with this issue.
Ubuntu Linux has released advisory USN-26-1 along with fixes to address this issue. Please see the referenced advisory for further information.
Bogofilter Project Email Filter 0.9 .0.3
Bogofilter Project Email Filter 0.9 .0.4
Bogofilter Project Email Filter 0.9 .0.5
Bogofilter Project Email Filter 0.92
Bogofilter Project Email Filter 0.92.4
Bogofilter Project Email Filter 0.92.6
Bogofilter Project Email Filter 0.92.7
Solution:
The vendor has released an upgrade dealing with this issue.
Ubuntu Linux has released advisory USN-26-1 along with fixes to address this issue. Please see the referenced advisory for further information.
Bogofilter Project Email Filter 0.9 .0.3
-
Bogofilter bogofilter-0.92.8
http://sourceforge.net/project/showfiles.php?group_id=62265
Bogofilter Project Email Filter 0.9 .0.4
-
Bogofilter bogofilter-0.92.8
http://sourceforge.net/project/showfiles.php?group_id=62265
Bogofilter Project Email Filter 0.9 .0.5
-
Bogofilter bogofilter-0.92.8
http://sourceforge.net/project/showfiles.php?group_id=62265
Bogofilter Project Email Filter 0.92
-
Bogofilter bogofilter-0.92.8
http://sourceforge.net/project/showfiles.php?group_id=62265 -
Ubuntu bogofilter_0.92.0-1ubuntu0.1_amd64.deb
Ubuntu 4.10 (Warty Warthog)
http://security.ubuntu.com/ubuntu/pool/main/b/bogofilter/bogofilter_0. 92.0-1ubuntu0.1_amd64.deb -
Ubuntu bogofilter_0.92.0-1ubuntu0.1_i386.deb
Ubuntu 4.10 (Warty Warthog)
http://security.ubuntu.com/ubuntu/pool/main/b/bogofilter/bogofilter_0. 92.0-1ubuntu0.1_i386.deb -
Ubuntu bogofilter_0.92.0-1ubuntu0.1_powerpc.deb
Ubuntu 4.10 (Warty Warthog)
http://security.ubuntu.com/ubuntu/pool/main/b/bogofilter/bogofilter_0. 92.0-1ubuntu0.1_powerpc.deb
Bogofilter Project Email Filter 0.92.4
-
Bogofilter bogofilter-0.92.8
http://sourceforge.net/project/showfiles.php?group_id=62265
Bogofilter Project Email Filter 0.92.6
-
Bogofilter bogofilter-0.92.8
http://sourceforge.net/project/showfiles.php?group_id=62265
Bogofilter Project Email Filter 0.92.7
-
Bogofilter bogofilter-0.92.8
http://sourceforge.net/project/showfiles.php?group_id=62265
References
Bogofilter EMail Filter Remote Quoted Printable Decoder Denial Of Service Vulnerability
References:
References:
- Bogofilter Homepage (SourceForge)
- bogofilter-SA-2004-01 - vulnerability in bogofilter/bogolexer (Bogofilter)