BarnOwl 'owl_message_get_cc_without_recipient()' Heap Buffer Overflow Vulnerability

Bugtraq ID:	38809
Class:	Boundary Condition Error
CVE:	CVE-2010-0793
Remote:	Yes
Local:	No
Published:	Mar 17 2010 12:00AM
Updated:	May 24 2010 09:52AM
Credit:	MIT
Vulnerable:	MIT BarnOwl 1.5.1 MIT BarnOwl 1.5 MIT BarnOwl 1.0.5 MIT BarnOwl 1.0.4 Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0
Not Vulnerable:

BarnOwl 'owl_message_get_cc_without_recipient()' Heap Buffer Overflow Vulnerability

BarnOwl is prone to a heap-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data.

Successfully exploiting these issues will allow an attacker to execute arbitrary code within the context of the affected application. Failed exploit attempts will likely crash the application.

Versions prior to BarnOwl 1.5.1 are vulnerable.

BarnOwl 'owl_message_get_cc_without_recipient()' Heap Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references for more information.


Debian Linux 5.0 hppa

• Debian barnowl-irc_1.0.1-4+lenny1_all.deb
  http://security.debian.org/pool/updates/main/b/barnowl/barnowl-irc_1.0 .1-4+lenny1_all.deb


• Debian barnowl_1.0.1-4+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/b/barnowl/barnowl_1.0.1-4 +lenny1_hppa.deb

Debian Linux 5.0 ia-64

• Debian barnowl-irc_1.0.1-4+lenny1_all.deb
  http://security.debian.org/pool/updates/main/b/barnowl/barnowl-irc_1.0 .1-4+lenny1_all.deb


• Debian barnowl_1.0.1-4+lenny1_ia64.deb
  http://security.debian.org/pool/updates/main/b/barnowl/barnowl_1.0.1-4 +lenny1_ia64.deb

Debian Linux 5.0 m68k

• Debian barnowl-irc_1.0.1-4+lenny1_all.deb
  http://security.debian.org/pool/updates/main/b/barnowl/barnowl-irc_1.0 .1-4+lenny1_all.deb

Debian Linux 5.0 arm

• Debian barnowl-irc_1.0.1-4+lenny1_all.deb
  http://security.debian.org/pool/updates/main/b/barnowl/barnowl-irc_1.0 .1-4+lenny1_all.deb


• Debian barnowl_1.0.1-4+lenny1_arm.deb
  http://security.debian.org/pool/updates/main/b/barnowl/barnowl_1.0.1-4 +lenny1_arm.deb

Debian Linux 5.0 armel

• Debian barnowl-irc_1.0.1-4+lenny1_all.deb
  http://security.debian.org/pool/updates/main/b/barnowl/barnowl-irc_1.0 .1-4+lenny1_all.deb

Debian Linux 5.0

• Debian barnowl-irc_1.0.1-4+lenny1_all.deb
  http://security.debian.org/pool/updates/main/b/barnowl/barnowl-irc_1.0 .1-4+lenny1_all.deb

Debian Linux 5.0 alpha

• Debian barnowl-irc_1.0.1-4+lenny1_all.deb
  http://security.debian.org/pool/updates/main/b/barnowl/barnowl-irc_1.0 .1-4+lenny1_all.deb


• Debian barnowl_1.0.1-4+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/b/barnowl/barnowl_1.0.1-4 +lenny1_alpha.deb

Debian Linux 5.0 amd64

• Debian barnowl-irc_1.0.1-4+lenny1_all.deb
  http://security.debian.org/pool/updates/main/b/barnowl/barnowl-irc_1.0 .1-4+lenny1_all.deb


• Debian barnowl_1.0.1-4+lenny1_amd64.deb
  http://security.debian.org/pool/updates/main/b/barnowl/barnowl_1.0.1-4 +lenny1_amd64.deb

Debian Linux 5.0 ia-32

• Debian barnowl-irc_1.0.1-4+lenny1_all.deb
  http://security.debian.org/pool/updates/main/b/barnowl/barnowl-irc_1.0 .1-4+lenny1_all.deb


• Debian barnowl_1.0.1-4+lenny1_i386.deb
  http://security.debian.org/pool/updates/main/b/barnowl/barnowl_1.0.1-4 +lenny1_i386.deb

Debian Linux 5.0 mips

• Debian barnowl-irc_1.0.1-4+lenny1_all.deb
  http://security.debian.org/pool/updates/main/b/barnowl/barnowl-irc_1.0 .1-4+lenny1_all.deb


• Debian barnowl_1.0.1-4+lenny1_mips.deb
  http://security.debian.org/pool/updates/main/b/barnowl/barnowl_1.0.1-4 +lenny1_mips.deb

Debian Linux 5.0 s/390

• Debian barnowl-irc_1.0.1-4+lenny1_all.deb
  http://security.debian.org/pool/updates/main/b/barnowl/barnowl-irc_1.0 .1-4+lenny1_all.deb


• Debian barnowl_1.0.1-4+lenny1_s390.deb
  http://security.debian.org/pool/updates/main/b/barnowl/barnowl_1.0.1-4 +lenny1_s390.deb

Debian Linux 5.0 mipsel

• Debian barnowl-irc_1.0.1-4+lenny1_all.deb
  http://security.debian.org/pool/updates/main/b/barnowl/barnowl-irc_1.0 .1-4+lenny1_all.deb

Debian Linux 5.0 powerpc

• Debian barnowl-irc_1.0.1-4+lenny1_all.deb
  http://security.debian.org/pool/updates/main/b/barnowl/barnowl-irc_1.0 .1-4+lenny1_all.deb


• Debian barnowl_1.0.1-4+lenny1_powerpc.deb
  http://security.debian.org/pool/updates/main/b/barnowl/barnowl_1.0.1-4 +lenny1_powerpc.deb

Debian Linux 5.0 sparc

• Debian barnowl-irc_1.0.1-4+lenny1_all.deb
  http://security.debian.org/pool/updates/main/b/barnowl/barnowl-irc_1.0 .1-4+lenny1_all.deb


• Debian barnowl_1.0.1-4+lenny1_sparc.deb
  http://security.debian.org/pool/updates/main/b/barnowl/barnowl_1.0.1-4 +lenny1_sparc.deb

MIT BarnOwl 1.0.4

• MIT barnowl-1.5.1-src.tgz
  http://barnowl.mit.edu/dist/barnowl-1.5.1-src.tgz

MIT BarnOwl 1.0.5

• MIT barnowl-1.5.1-src.tgz
  http://barnowl.mit.edu/dist/barnowl-1.5.1-src.tgz

MIT BarnOwl 1.5

• MIT barnowl-1.5.1-src.tgz
  http://barnowl.mit.edu/dist/barnowl-1.5.1-src.tgz

BarnOwl 'owl_message_get_cc_without_recipient()' Heap Buffer Overflow Vulnerability

References:

• BarnOwl 1.5.1 released (MIT)
  
• BarnOwl Changlog (MIT)