evolution: arbitrary code execution [LWN.net]

Package(s):

evolution

CVE #(s):

CAN-2005-0102

Created:

January 24, 2005

Updated:

May 19, 2005

Description:

Max Vozeler discovered an integer overflow in camel-lock-helper. A user-supplied length value was not validated, so that a value of -1 caused a buffer allocation of 0 bytes; this buffer was then filled by an arbitrary amount of user-supplied data. A local attacker or a malicious POP3 server could exploit this to execute arbitrary code with root privileges (because camel-lock-helper is installed as setuid root).

Alerts:

Red Hat	RHSA-2005:238-01	2005-05-19
Conectiva	CLA-2005:925	2005-02-16
Debian	DSA-673-1	2005-02-10
Mandrake	MDKSA-2005:024	2005-01-27
Gentoo	200501-35	2005-01-24
Ubuntu	USN-69-1	2005-01-24

(Log in to post comments)

evolution: arbitrary code execution

Posted Feb 17, 2005 13:23 UTC (Thu) by cbcbcb (guest, #10350) [Link]

Would anyone like to explain why a mail client needs root priviledges?