Product
Sun Cobalt Qube 3 Server
Sun Cobalt RaQ XTR Server
Sun Cobalt RaQ 4 Server
Sun Cobalt RaQ 550 Server

Bug Id
4776218

Date of Resolved Release
04-AUG-2003

Impact

A remote unprivileged user can create an email to exploit a buffer overflow vulnerability in Pine 4.44 that may cause a Denial of Service (DoS).

This issue is described at:

• CVE: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2002-1320
• Red Hat Advisory RHSA-2002:270-18: https://rhn.redhat.com/errata/RHSA-2002-270.html

Contributing Factors

This issue can occur in the following releases:

Sun Linux

• Sun Linux 5.0 with Pine 4.44 and earlier

Sun Cobalt Appliances

• Sun Cobalt Qube 3 with Pine 4.44 and earlier
• Sun Cobalt RaQ 4 with Pine 4.44 and earlier
• Sun Cobalt RaQ 550 with Pine 4.44 and earlier
• Sun Cobalt RaQ XTR with Pine 4.44 and earlier

In versions of Pine 4.44 and earlier, Pine does not allocate enough memory for the parsing and escaping of the "From:" email header. A remote unprivileged user may carefully craft an email in Pine that will cause a buffer overflow on the heap, which may result in a Denial of Service (DoS).

Note: Pine is a tool for reading, sending, and managing electronic messages.

Symptoms

An example of this issue would be an email message with a "From:" header that contains a large number of quotation marks ("), as in the following example:

    From: "\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\""@host.fubar

Workaround

There is no workaround. Please see the "Resolution" section below.

Resolution

This issue is addressed in the following releases:

Sun Linux

• Sun Linux 5.0 with Pine-4.44-1.72.2.i386.rpm or later, at: ftp://ftp.cobalt.sun.com/pub/products/sunlinux/5.0/en/updates/i386/RPMS

Sun Cobalt Appliances

• SRPM with Pine-4.44-1.72.2.src.rpm or later, at: ftp://ftp.cobalt.sun.com/pub/products/sunlinux/5.0/en/updates/i386/SRPMS
• Qube3 with Qube 3-All-Security-4.0.1-16306.pkg or later, at: http://ftp.cobalt.sun.com/pub/packages/qube3/ml
• RaQ 4 with RaQ 4-All-Security-2.0.1-16306.pkg or later, at: http://ftp.cobalt.sun.com/pub/packages/raq4/eng
• RaQ 550 with RaQ 550-All-Security-0.0.1-16306.pkg or later, at: http://ftp.cobalt.sun.com/pub/packages/raq550/all
• RaQ XTR with RaQ XTR-All-Security-1.0.1-16306.pkg or later, at: http://ftp.cobalt.sun.com/pub/packages/raqxtr/eng

Modification History

Attachments

This solution has no attachment