REDHAT-BUG-883358: Buffer Overflow
A heap-based buffer overflow flaw was found in the way bogolexer component of Bogofilter, fast anti-spam filtering tool by Bayesian statistical analysis, performed decoding of certain base64 strings. A remote attacker could provide a specially-crafted base64 code (decoding to incomplete multibyte characters) that, when processed, would lead to bogolexer executable crash or, potentially, arbitrary code execution with the privileges of the user running the binary.
Upstream advisory: [1] http://bogofilter.sourceforge.net/security/bogofilter-SA-2012-01
References: [2] http://www.openwall.com/lists/oss-security/2012/12/03/13
Relevant upstream patch: [3] http://bogofilter.svn.sourceforge.net/viewvc/bogofilter?view=revision&revision=6973
Reproducer / regression test: [4] http://bogofilter.svn.sourceforge.net/viewvc/bogofilter?view=revision&revision=6975
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-883358?
The severity of REDHAT-BUG-883358 is critical due to the potential for remote code execution from a buffer overflow.
How do I fix REDHAT-BUG-883358?
To fix REDHAT-BUG-883358, update to the latest version of Bogofilter that addresses this vulnerability.
Who is affected by REDHAT-BUG-883358?
Users of the Bogofilter tool that utilize the bogolexer component for spam filtering are affected by REDHAT-BUG-883358.
What is the nature of the vulnerability in REDHAT-BUG-883358?
The vulnerability in REDHAT-BUG-883358 is a heap-based buffer overflow that can be triggered by specially-crafted base64 strings.
Can REDHAT-BUG-883358 be exploited remotely?
Yes, REDHAT-BUG-883358 can be exploited remotely, allowing attackers to execute arbitrary code on affected systems.