CVE-2010-2494: Buffer Overflow
A flaw was found in bogofilter's/bogolexer's base64 where it could overwrite memory before its heap buffer, if the base64 input started with an equals sign, such as through misdeclaration of quoted-printable as base64. This would cause bogofilter/bogolexer to corrupt their heap and crash upon receiving such an email message.
Something is wrong with the bogofilter home page, the original referenced advisory [1] is currently unavailable, however a copy in svn [2] is. This will also be corrected in upstream version 1.2.2; a patch [3] is available. Please note that upstream version 1.2.2 is not yet available.
References:
[1] http://bogofilter.sourceforge.net/security/bogofilter-SA-2010-01 [2] http://bogofilter.svn.sourceforge.net/viewvc/bogofilter/trunk/bogofilter/doc/bogofilter-SA-2010-01?view=markup&pathrev=6909 [3] http://bogofilter.svn.sourceforge.net/viewvc/bogofilter/trunk/bogofilter/src/base64.c?view=patch&r1=6906&r2=6903
This affects bogofilter as shipped in Fedora 12 and 13, as well as EPEL5.
Other sources
Multiple buffer underflows in the base64 decoder in base64.c in (1) bogofilter and (2) bogolexer in bogofilter before 1.2.2 allow remote attackers to cause a denial of service (heap memory corruption and application crash) via an e-mail message with invalid base64 data that begins with an = (equals) character.
— MITRE
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-2494?
CVE-2010-2494 is classified as a high severity vulnerability due to the potential for memory corruption and application crashes.
How do I fix CVE-2010-2494?
To fix CVE-2010-2494, upgrade to a patched version of Bogofilter that addresses this vulnerability.
What versions of Bogofilter are affected by CVE-2010-2494?
CVE-2010-2494 affects Bogofilter versions 1.0.0 through 1.2.1, including specific versions like 1.1.2 and 1.1.7.
What are the potential consequences of CVE-2010-2494?
The consequences of CVE-2010-2494 include application crashes and potential exploitation of memory corruption vulnerabilities.
Is CVE-2010-2494 a remote or local vulnerability?
CVE-2010-2494 is considered a local vulnerability, as it requires local access to exploit.