CVE-2004-1007: Medium severity bogofilter Email Filter vulnerability
The quoted-printable decoder in bogofilter 0.17.4 to 0.92.7 allows remote attackers to cause a denial of service (application crash) via mail headers that cause a line feed (LF) to be replaced by a null byte that is written to an incorrect memory address.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2004-1007?
CVE-2004-1007 is considered a denial of service vulnerability that can lead to application crashes.
How do I fix CVE-2004-1007?
To fix CVE-2004-1007, you should upgrade to a version of Bogofilter that is not affected, specifically a version greater than 0.92.7.
Which software is affected by CVE-2004-1007?
CVE-2004-1007 affects multiple versions of Bogofilter including 0.17.4 to 0.92.7 and certain versions of Ubuntu Linux.
What kind of attack does CVE-2004-1007 enable?
CVE-2004-1007 allows remote attackers to exploit email headers leading to potential application crashes.
Is CVE-2004-1007 a remote vulnerability?
Yes, CVE-2004-1007 can be exploited remotely through specially crafted mail headers.