CVE-2005-0102 Integer overflow in n/a
Local users or malicious POP3 servers can execute arbitrary code via an integer overflow in the Evolution email client's lock helper.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2005-0102?
CVE-2005-0102 is a critical vulnerability in Debian Debian Linux, published on 29 Jan 2005. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Integer overflow in camel-lock-helper in Evolution 2.0.2 and earlier allows local users or remote malicious POP3 servers to execute arbitrary code via a length value of -1, which leads to a zero byte memory allocation and a buffer overflow.
Weakness: CWE-190
Which versions are affected by CVE-2005-0102?
It affects 2 products.
Linux distribution packages (12)
evolution Red Hat:enterprise_linux:3::as | All versions | 0:1.4.5-14 |
evolution-debuginfo Red Hat:enterprise_linux:3::as | All versions | 0:1.4.5-14 |
evolution-devel Red Hat:enterprise_linux:3::as | All versions | 0:1.4.5-14 |
evolution Red Hat:enterprise_linux:3::desktop | All versions | 0:1.4.5-14 |
evolution-debuginfo Red Hat:enterprise_linux:3::desktop | All versions | 0:1.4.5-14 |
evolution-devel Red Hat:enterprise_linux:3::desktop | All versions | 0:1.4.5-14 |
evolution Red Hat:enterprise_linux:3::es | All versions | 0:1.4.5-14 |
evolution-debuginfo Red Hat:enterprise_linux:3::es | All versions | 0:1.4.5-14 |
evolution-devel Red Hat:enterprise_linux:3::es | All versions | 0:1.4.5-14 |
evolution Red Hat:enterprise_linux:3::ws | All versions | 0:1.4.5-14 |
evolution-debuginfo Red Hat:enterprise_linux:3::ws | All versions | 0:1.4.5-14 |
evolution-devel Red Hat:enterprise_linux:3::ws | All versions | 0:1.4.5-14 |
Products include Debian Debian Linux, Gnome Evolution.
How do I fix CVE-2005-0102?
Apply the vendor's patch.
Is CVE-2005-0102 being exploited?
There is no known exploitation of CVE-2005-0102 in the wild and no public exploit code.
Other vulnerabilities in Debian Debian Linux
Sources
Also known as DEBIAN-CVE-2005-0102, DSA-673-1, GHSA-ghp8-rg92-746w, RHSA-2005:238.