CVE-2010-2725

BarnOwl before 1.6.2 has an unchecked return-value vulnerability in libzephyr: ZPending and ZReceiveNotice return codes are not checked, enabling a remote attacker to cause a denial of service (crash) and potentially execute arbitrary code via unknown vectors. Detected in multiple sources (Debian...

CVE-2009-0363

CVE-2009-0363 affects BarnOwl prior to 1.0.5 and Owl prior to 2.1.11. Multiple buffer overflows could allow remote code execution via (1) crafted zcrypt messages (zcrypt.c) or (2) a reply command on a message with a Zephyr Cc: list (zwrite.c), plus unspecified other uses. No patch/version fix is ...

CVE-2010-0793

CVE-2010-0793 affects barnowl prior to version 1.5.1, where a buffer overflow in the CC: header handling could allow a remote attacker to crash the client or execute arbitrary code. Connected advisories (Debian DSA-2049-1) confirm remote, code-execution risk and specify fixed packages/releases: s...