Multiple buffer underflows in the base64 decoder in base64.c in (1) bogofilter and (2) bogolexer in bogofilter before 1.2.2 allow remote attackers to cause a denial of service (heap memory corruption and application crash) via an e-mail message with invalid base64 data that begins with an = (equals) character.

This version upgrade of bogofilter fixed a heap corruption in the base 64 decoding routine as well as several other non-security issues.

This update of bogofilter/bogolexer fixes a heap-based buffer underflow vulnerability which could be exploited to cause a denial of service or potentially execute arbitrary code. (CVE-2010-2494)

Julius Plenz discovered that bogofilter incorrectly handled certain malformed encodings. By sending a specially crafted email, a remote attacker could exploit this and cause bogofilter to crash, resulting in a denial of service.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Fixes CVE-2010-2494

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update of bogofilter/bogolexer fixes a heap based buffer underflow vulnerability which could be exploited to cause a denial of service or potentially execute arbitrary code (CVE-2010-2494).

Julius Plenz reports :

I found a bug in the base64_decode function which may cause memory corruption when the function is executed on a malformed base64 encoded string.

If a string starting with an equal-sign is passed to the base64_decode function it triggers a memory corruption that in some cases makes bogofilter crash.

ID	Name	Product	Family	Severity
74844	openSUSE Security Update : bogofilter (openSUSE-SU-2012:1650-1)	Nessus	SuSE Local Security Checks	medium
74843	openSUSE Security Update : bogofilter (openSUSE-SU-2012:1648-1)	Nessus	SuSE Local Security Checks	medium
50891	SuSE 11 / 11.1 Security Update : bogofilter (SAT Patch Numbers 2665 / 2666)	Nessus	SuSE Local Security Checks	medium
49065	Ubuntu 8.04 LTS / 9.04 / 9.10 / 10.04 LTS : bogofilter vulnerability (USN-980-1)	Nessus	Ubuntu Local Security Checks	medium
48932	Fedora 12 : bogofilter-1.2.2-1.fc12 (2010-13154)	Nessus	Fedora Local Security Checks	medium
48931	Fedora 13 : bogofilter-1.2.2-1.fc13 (2010-13139)	Nessus	Fedora Local Security Checks	medium
48747	Fedora 14 : bogofilter-1.2.2-1.fc14 (2010-12959)	Nessus	Fedora Local Security Checks	medium
47853	openSUSE Security Update : bogofilter (openSUSE-SU-2010:0439-1)	Nessus	SuSE Local Security Checks	medium
47852	openSUSE Security Update : bogofilter (openSUSE-SU-2010:0439-1)	Nessus	SuSE Local Security Checks	medium
47616	FreeBSD : bogofilter -- heap underrun on malformed base64 input (25ed4ff8-8940-11df-a339-0026189baca3)	Nessus	FreeBSD Local Security Checks	medium

Detections

Analytics

CVE-2010-2494

high

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium