| Revision Date: | 2013-04-29 | Version: | 13 | | Title: | The ntlm_challenge function in the NTLM SASL authentication mechanism in camel/camel-sasl-ntlm.c in Camel in Evolution Data Server (aka evolution-data-server) 2.24.5 and earlier, and 2.25.92 and earlier 2.25.x versions, does not validate whether a certain length value is consistent with the amount of data in a challenge packet, which allows remote mail servers to read information from the process memory of a client, or cause a denial of service (client crash), via an NTLM authentication type 2 packet with a length value that exceeds the amount of packet data. | | Description: | The ntlm_challenge function in the NTLM SASL authentication mechanism in camel/camel-sasl-ntlm.c in Camel in Evolution Data Server (aka evolution-data-server) 2.24.5 and earlier, and 2.25.92 and earlier 2.25.x versions, does not validate whether a certain length value is consistent with the amount of data in a challenge packet, which allows remote mail servers to read information from the process memory of a client, or cause a denial of service (client crash), via an NTLM authentication type 2 packet with a length value that exceeds the amount of packet data. | | Family: | unix | Class: | vulnerability | | Status: | ACCEPTED | Reference(s): | CVE-2009-0582
| | Platform(s): | CentOS Linux 3
CentOS Linux 4
CentOS Linux 5
Oracle Linux 4
Oracle Linux 5
Red Hat Enterprise Linux 3
Red Hat Enterprise Linux 4
Red Hat Enterprise Linux 5
| Product(s): | | | Definition Synopsis | | OS Section: RHEL3, CentOS3 RHEL3 or CentOS3
The operating system installed on the system is Red Hat Enterprise Linux 3
OR CentOS Linux 3.x
AND Configuration section
evolution is earlier than 0:1.4.5-25.el3
OR evolution-devel is earlier than 0:1.4.5-25.el3
OR OS Section: RHEL4, CentOS4, Oracle Linux 4
RHEL4, CentOS4 or Oracle Linux 4
The operating system installed on the system is Red Hat Enterprise Linux 4
OR CentOS Linux 4.x
OR Oracle Linux 4.x
AND Configuration section
evolution28-evolution-data-server-devel is earlier than 0:1.8.0-37.el4_7.2
OR evolution-data-server-devel is earlier than 0:1.0.2-14.el4_7.1
OR evolution-data-server is earlier than 0:1.0.2-14.el4_7.1
OR evolution is earlier than 0:2.0.2-41.el4_7.2
OR evolution28-evolution-data-server is earlier than 0:1.8.0-37.el4_7.2
OR evolution-devel is earlier than 0:2.0.2-41.el4_7.2
OR OS Section: RHEL5, CentOS5, Oracle Linux 5
RHEL5, CentOS5 or Oracle Linux 5
The operating system installed on the system is Red Hat Enterprise Linux 5
OR The operating system installed on the system is CentOS Linux 5.x
OR Oracle Linux 5.x
AND Configuration section
evolution-data-server-devel is earlier than 0:1.12.3-10.el5_3.3
OR evolution-data-server is earlier than 0:1.12.3-10.el5_3.3
OR evolution-data-server-doc is earlier than 0:1.12.3-10.el5_3.3
|
|