Lucene search
UbuntuUSN-1667-1HistoryDec 17, 2012 - 12:00 a.m.
bogofilter vulnerability
2012-12-1700:00:00
ubuntu.com
28
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.5
Confidence
Low
EPSS
0.2
Percentile
96.4%
Releases
- Ubuntu 10.04
Packages
- bogofilter - a fast Bayesian spam filter
Details
Julius Plenz discovered that bogofilter incorrectly handled certain
invalid base64 code. By sending a specially crafted email, a remote
attacker could exploit this and cause bogofilter to crash, resulting in a
denial of service, or possibly execute arbitrary code.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 10.04 | noarch | bogofilter-bdb | < 1.2.1-0ubuntu1.2 | UNKNOWN |
| Ubuntu | 10.04 | noarch | bogofilter | < 1.2.1-0ubuntu1.2 | UNKNOWN |
| Ubuntu | 10.04 | noarch | bogofilter-sqlite | < 1.2.1-0ubuntu1.2 | UNKNOWN |
References
Related
openvas
openvas
FreeBSD Ports: bogofilter
2012-12-04 00:00:00
Fedora Update for bogofilter FEDORA-2012-19740
2012-12-14 00:00:00
Debian: Security Advisory (DSA-2585-1)
2013-09-18 00:00:00
securityvulns
securityvulns
gobofilter buffer overflow
2012-12-12 00:00:00
[SECURITY] [DSA 2585-1] bogofilter security update
2012-12-12 00:00:00
prion
prion
Heap overflow
2012-12-18 01:55:00
fedora
fedora
[SECURITY] Fedora 17 Update: bogofilter-1.2.3-1.fc17
2012-12-13 05:57:19
[SECURITY] Fedora 18 Update: bogofilter-1.2.3-1.fc18
2013-01-12 01:12:27
[SECURITY] Fedora 16 Update: bogofilter-1.2.3-1.fc16
2012-12-13 05:58:54
debian
debian
[SECURITY] [DSA 2585-1] bogofilter security update
2012-12-11 18:27:11
nessus
nessus
Mandriva Linux Security Advisory : bogofilter (MDVSA-2013:064)
2013-04-20 00:00:00
Ubuntu 10.04 LTS : bogofilter vulnerability (USN-1667-1)
2012-12-18 00:00:00
Fedora 16 : bogofilter-1.2.3-1.fc16 (2012-19740)
2012-12-13 00:00:00
ubuntucve
ubuntucve
CVE-2012-5468
2012-12-11 00:00:00
debiancve
debiancve
CVE-2012-5468
2012-12-18 01:55:03
nvd
nvd
CVE-2012-5468
2012-12-18 01:55:03
suse
suse
Security update for bogofilter (important)
2012-12-17 16:08:37
cvelist
cvelist
CVE-2012-5468
2012-12-18 01:00:00
freebsd
freebsd
bogofilter -- heap corruption by invalid base64 input
2012-10-17 00:00:00
cve
cve
CVE-2012-5468
2012-12-18 01:55:03
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.5
Confidence
Low
EPSS
0.2
Percentile
96.4%
Related for USN-1667-1