CVE-2009-0363

Publicada em 17 fev 2009 · Atualizada em 07 ago 2024

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 3.4%

Multiple buffer overflows in (a) BarnOwl before 1.0.5 and (b) owl 2.1.11 allow remote attackers to execute arbitrary code via vectors involving (1) a crafted zcrypt message, related to zcrypt.c; (2) a reply command on a message with a Zephyr Cc: list, related to zwrite.c; and unspecified other use of the products.

Produtos afetados

n/a · n/a

Referências

http://barnowl.mit.edu/browser/ChangeLog http://barnowl.mit.edu/wiki/barnowl-1.0.5-announce http://bugs.debian.org/515118 https://bugs.launchpad.net/ubuntu/+source/owl/+bug/329165 https://exchange.xforce.ibmcloud.com/vulnerabilities/48824 http://www.mail-archive.com/debian-testing-security-announce%40lists.debian.org/msg00173.html