Bug 260117

Summary:	net-mail/uw-imap format string vulnerability (CVE-2009-0671)
Product:	Gentoo Security	Reporter:	Robert Buchholz (RETIRED) <rbu>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED INVALID
Severity:	normal	CC:	net-mail+disabled
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:	B2 [ebuild]
Package list:		Runtime testing required:	---
Bug Depends on:	260115
Bug Blocks:

Description Robert Buchholz (RETIRED) gentoo-dev

2009-02-24 11:41:08 UTC

CVE-2009-0671 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2009-0671):
  Format string vulnerability in the University of Washington (UW)
  c-client library, as used by the UW IMAP toolkit imap-2007d and other
  applications, allows remote attackers to execute arbitrary code via
  format string specifiers in the initial request to the IMAP port
  (143/tcp).

Comment 1 Robert Buchholz (RETIRED) gentoo-dev

2009-02-25 16:09:12 UTC

INVALID, see blocker for details.