sm-security AT lists.ibiblio.org

Subject: Security bugs are reported here via bugzilla

List archive

[SM-Security] mailutils: multiple vulnerabilities in imap4d and mail

From: Thomas Houssin <Thomas.Houssin AT gmail.com>
To: sm-security AT lists.ibiblio.org
Subject: [SM-Security] mailutils: multiple vulnerabilities in imap4d and mail
Date: Tue, 31 May 2005 02:51:54 +0200

Synopsis
========
The imap4d server and the mail utility from GNU Mailutils contain
multiple vulnerabilities, potentially allowing a remote attacker to
execute arbitrary code with root privileges.

Background
==========
mailutils are a series of useful mail clients, servers, and libraries.

Description
===========
(from GLSA 200505-20) : infamous41d discovered several vulnerabilities
in GNU Mailutils. imap4d does not correctly implement formatted printing
of command tags (CAN-2005-1523), fails to validate the range sequence of
the "FETCH" command (CAN-2005-1522), and contains an integer overflow in
the "fetch_io" routine (CAN-2005-1521). mail contains a buffer overflow
in "header_get_field_name()" (CAN-2005-1520).

Affected packages
=================
mailutils in all grimoires is affected.
This is now fixed in devel, test, stable-rc and stable grimoire.

Resolution
==========
All mailutils users should upgrade to the latest available version:
#scribe update
#cast -c mailutils

--
Thomas Houssin

Security Team Lead : Source Mage GNU/Linux http://www.sourcemage.org
Key fingerprint = 3CB8 3FC4 840D B272 E623 BCB8 54DB F4E3 4240 4C36
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x42404C36

Attachment: signature.asc
Description: OpenPGP digital signature

[SM-Security] mailutils: multiple vulnerabilities in imap4d and mail, Thomas Houssin, 05/30/2005