Lucene search

K
osvGoogleOSV:DSA-1061-1
HistoryMay 19, 2006 - 12:00 a.m.

popfile - missing input sanitising

2006-05-1900:00:00
Google
osv.dev
5

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

It has been discovered that popfile, a bayesian mail classifier, can
be forced into a crash through malformed character sets within email
messages, which allows denial of service.

The old stable distribution (woody) does not contain popfile packages.

For the stable distribution (sarge) this problem has been fixed in
version 0.22.2-2sarge1.

For the unstable distribution (sid) this problem has been fixed in
version 0.22.4-1.

We recommend that you upgrade your popfile package.

CPENameOperatorVersion
popfileeq0.22.2-2

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P