CVE-2008-2829: Buffer Overflow
phpimap.c in PHP 5.2.5, 5.2.6, 4.x, and other versions, uses obsolete API calls that allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long IMAP request, which triggers an "rfc822.c legacy routine buffer overflow" error message, related to the rfc822writeaddress function.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2008-2829?
CVE-2008-2829 has a medium severity level, as it can lead to denial of service and possible arbitrary code execution.
How do I fix CVE-2008-2829?
To fix CVE-2008-2829, you should upgrade your PHP version to a more recent and secure release that is not affected by this vulnerability.
What systems are affected by CVE-2008-2829?
CVE-2008-2829 affects PHP versions 5.2.5, 5.2.6, and all versions of PHP 4.x, as well as specific versions of Ubuntu Linux.
Can CVE-2008-2829 be exploited remotely?
Yes, CVE-2008-2829 can be exploited remotely by context-dependent attackers through specially crafted IMAP requests.
What kind of vulnerability is CVE-2008-2829?
CVE-2008-2829 is a buffer overflow vulnerability that can trigger a crash of the affected application.