Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 465
Alerts This Week
Warning Icon 1 465

Ubuntu 10.04 LTS: USN-1667-1 Critical: Bogofilter DoS Threat

ubuntu
Calendar Grey December 17, 2012
Scroller Ubuntu
The Bogofilter flaw in Ubuntu 10.04 LTS enables system instability or unauthorized code execution through specially designed emails. Ensure your safety!
bogofilter could be made to crash or run programs if it processed a specially crafted email.

Summary

bogofilter could be made to crash or run programs if it processed a

specially crafted email.

Software Description:

- bogofilter: a fast Bayesian spam filter

Details:

Julius Plenz discovered that bogofilter incorrectly handled certain

invalid base64 code. By sending a specially crafted email, a remote

attacker could exploit this and cause bogofilter to crash, resulting in a

denial of service, or possibly execute arbitrary code.

Topics%20covered

Topics Covered

security advisory denial of service critical ubuntu bogofilter

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 10.04 LTS:
  bogofilter-bdb                  1.2.1-0ubuntu1.2
  bogofilter-sqlite               1.2.1-0ubuntu1.2

In general, a standard system update will make all the necessary changes.

References

CVE-2012-5468

Severity
critical
Lowest
Low
Medium
High
Critical

December 17, 2012

Topics%20covered

Topics Covered

security advisory denial of service critical ubuntu bogofilter

Package Information

https://launchpad.net/ubuntu/+source/bogofilter/1.2.1-0ubuntu1.2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.