Stack-based buffer overflow in the ldif_get_line function in ldif.c of Sylpheed before 2.1.6 allows user-assisted attackers to execute arbitrary code by having local users import LDIF files with long lines.

Colin Leroy discovered several buffer overflows in a number of importer routines in sylpheed-claws, an extended version of the Sylpheed mail client, that could lead to the execution of arbitrary code.

Colin Leroy discovered several buffer overflows in a number of importer routines in sylpheed, a light-weight e-mail client with GTK+, that could lead to the execution of arbitrary code.

Kurt Fitzner discovered that the NBD (network block device) server did not correctly verify the maximum size of request packets. By sending specially crafted large request packets, a remote attacker who is allowed to access the server could exploit this to execute arbitrary code with root privileges.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-200511-13 (Sylpheed, Sylpheed-Claws: Buffer overflow in LDIF importer)

    Colin Leroy reported buffer overflow vulnerabilities in Sylpheed     and Sylpheed-Claws. The LDIF importer uses a fixed length buffer to     store data of variable length. Two similar problems exist also in the     Mutt and Pine addressbook importers of Sylpheed-Claws.
  Impact :

    By convincing a user to import a specially crafted LDIF file into     the address book, a remote attacker could cause the program to crash,     potentially allowing the execution of arbitrary code with the     privileges of the user running the software.
  Workaround :

    There is no known workaround at this time.

- Wed Nov 9 2005 Akira TAGOH <tagoh at redhat.com> -     1.0.6-0.fc3

    - New upstream release.

    - CVE-2005-3354: fixes addressbook buffer overflow.
      (#172721)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote client is running Sylpheed, an email client for Unix and Unix-like operating systems.  This version is vulnerable to a buffer overflow via specially crafted email messages. An attacker exploiting this flaw would need to be able to convince a user to open a malicious email message and importing an attached LDIF file into their address book.  Successful exploitation would lead to a Denial of Service or remote code execution.

ID	Name	Product	Family	Severity
22774	Debian DSA-908-1 : sylpheed-claws - buffer overflows	Nessus	Debian Local Security Checks	medium
22772	Debian DSA-906-1 : sylpheed - buffer overflows	Nessus	Debian Local Security Checks	medium
20784	Ubuntu 5.10 : blender vulnerability (USN-238-1)	Nessus	Ubuntu Local Security Checks	medium
20783	Ubuntu 5.10 : nbd vulnerability (USN-237-1)	Nessus	Ubuntu Local Security Checks	medium
20234	GLSA-200511-13 : Sylpheed, Sylpheed-Claws: Buffer overflow in LDIF importer	Nessus	Gentoo Local Security Checks	medium
20188	Fedora Core 3 : sylpheed-1.0.6-0.fc3 (2005-1063)	Nessus	Fedora Local Security Checks	medium
3285	Sylpheed < 2.0.4 Address Book LDIF Import Overflow	Nessus Network Monitor	SMTP Clients	medium

Detections

Analytics

CVE-2005-3354

high

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium