Heap-based buffer overflow in iconvert.c in the bogolexer component in Bogofilter before 1.2.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an email containing a base64 string that is decoded to incomplete multibyte characters.

Updated bogofilter package fixes security vulnerability :

In bogofilter before 1.2.3, bogofilter's/bogolexer's base64 could overwrite heap memory in the character set conversion in certain pathological cases of invalid base64 code that decodes to incomplete multibyte characters (CVE-2012-5468).

A heap corruption in bogofilter's base64 decoding function, caused by incomplete multibyte characters, could have resulted in a Denial of Service (App. crash) or potentially allowed the execution of arbitrary code. This has been fixed.

updated to 1.2.3 (fixes #883358, CVE-2012-5468)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Julius Plenz discovered that bogofilter incorrectly handled certain invalid base64 code. By sending a specially crafted email, a remote attacker could exploit this and cause bogofilter to crash, resulting in a denial of service, or possibly execute arbitrary code.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

A heap-based buffer overflow was discovered in bogofilter, a software package for classifying mail messages as spam or non-spam. Crafted mail messages with invalid base64 data could lead to heap corruption and, potentially, arbitrary code execution.

David Relson reports :

Fix a heap corruption in base64 decoder on invalid input. Analysis and patch by Julius Plenz, [FU Berlin, Germany].

ID	Name	Product	Family	Severity
66078	Mandriva Linux Security Advisory : bogofilter (MDVSA-2013:064)	Nessus	Mandriva Local Security Checks	high
64116	SuSE 11.2 Security Update : bogofilter (SAT Patch Number 7135)	Nessus	SuSE Local Security Checks	high
63484	Fedora 18 : bogofilter-1.2.3-1.fc18 (2012-19664)	Nessus	Fedora Local Security Checks	high
63287	Ubuntu 10.04 LTS : bogofilter vulnerability (USN-1667-1)	Nessus	Ubuntu Local Security Checks	high
63269	Debian DSA-2585-1 : bogofilter - buffer overflow	Nessus	Debian Local Security Checks	high
63253	Fedora 16 : bogofilter-1.2.3-1.fc16 (2012-19740)	Nessus	Fedora Local Security Checks	high
63251	Fedora 17 : bogofilter-1.2.3-1.fc17 (2012-19705)	Nessus	Fedora Local Security Checks	high
63144	FreeBSD : bogofilter -- heap corruption by invalid base64 input (f524d8e0-3d83-11e2-807a-080027ef73ec)	Nessus	FreeBSD Local Security Checks	high

Detections

Analytics

CVE-2012-5468

critical

Tenable Plugins

high

high

high

high

high

high

high

high