Buffer overflow

2009-02-1717:30:00

PRIOn knowledge base

www.prio-n.com

8.5 High

AI Score

Confidence

Low

0.106 Low

EPSS

Percentile

95.1%

JSON

Multiple buffer overflows in (a) BarnOwl before 1.0.5 and (b) owl 2.1.11 allow remote attackers to execute arbitrary code via vectors involving (1) a crafted zcrypt message, related to zcrypt.c; (2) a reply command on a message with a Zephyr Cc: list, related to zwrite.c; and unspecified other use of the products.

CPENameOperatorVersion
barnowleq1.0.2.1
barnowleq1.0.3
barnowlle1.0.4.1
barnowleq1.0.0
barnowleq1.0.4
barnowleq1.0.2
barnowleq1.0.1
owleq2.1.11

Name	Operator	Version
barnowl	eq	1.0.2.1
barnowl	eq	1.0.3
barnowl	le	1.0.4.1
barnowl	eq	1.0.0
barnowl	eq	1.0.4
barnowl	eq	1.0.2
barnowl	eq	1.0.1
owl	eq	2.1.11

References

barnowl.mit.edu/browser/ChangeLog

barnowl.mit.edu/wiki/barnowl-1.0.5-announce

bugs.debian.org/515118

www.mail-archive.com/[email protected]/msg00173.html

bugs.launchpad.net/ubuntu/+source/owl/+bug/329165

exchange.xforce.ibmcloud.com/vulnerabilities/48824