|
|
>> Redhat Security Update Fixes libc-client Buffer Overflow Vulnerability
|
Title : Redhat Security Update Fixes libc-client Buffer Overflow Vulnerability
VUPEN ID : VUPEN/ADV-2005-2775
CVE ID : CVE-2005-2933
Rated as : Moderate Risk 
Remotely Exploitable : Yes
Locally Exploitable : Yes
Release Date : 2005-12-07
|
|
Redhat has released updated packages to correct a vulnerability identified in libc-client. This flaw is due to a stack overflow error in the "mail_valid_net_parse_work()" [src/c-client/mail.c] function that does not properly handle specially crafted mailbox names containing a quote (") character, which could be exploited by authenticated remote attackers to execute arbitrary commands with the privileges of the IMAP server. For additional information, see : VUPEN/ADV-2005-1953
ChangeLog
2005-12-07 : Initial release
Vulnerability Management
Subscribe to VUPEN VNS and receive real-time e-mail and SMS alerts when new advisories or patches relevant to your systems and network configurations are available.
Feedback
If you have additional information or corrections for this security advisory please submit them via our contact form. | |
|
