Search criteria

9 vulnerabilities found for barnowl by barnowl

FKIE_CVE-2010-2725

Vulnerability from fkie_nvd - Published: 2010-08-05 13:23 - Updated: 2025-04-11 00:51
Severity ?
Summary
BarnOwl before 1.6.2 does not check the return code of calls to the (1) ZPending and (2) ZReceiveNotice functions in libzephyr, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors.
References
cve@mitre.orghttp://barnowl.mit.edu/wiki/release-notes/1.6.2Vendor Advisory
cve@mitre.orghttp://github.com/barnowl/barnowl/blob/barnowl-1.6.2/ChangeLog
af854a3a-2127-422b-91ae-364da2661108http://barnowl.mit.edu/wiki/release-notes/1.6.2Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://github.com/barnowl/barnowl/blob/barnowl-1.6.2/ChangeLog
Impacted products
Vendor Product Version
barnowl barnowl *
barnowl barnowl 1.0.0
barnowl barnowl 1.0.1
barnowl barnowl 1.0.2
barnowl barnowl 1.0.2.1
barnowl barnowl 1.0.3
barnowl barnowl 1.0.4
barnowl barnowl 1.0.4.1
barnowl barnowl 1.0.5
barnowl barnowl 1.1
barnowl barnowl 1.1.1
barnowl barnowl 1.2
barnowl barnowl 1.2.1
barnowl barnowl 1.3
barnowl barnowl 1.4
barnowl barnowl 1.4
barnowl barnowl 1.5
barnowl barnowl 1.5
barnowl barnowl 1.5
barnowl barnowl 1.5.1
barnowl barnowl 1.6
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:barnowl:barnowl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "C8268E2E-6747-4550-A8E9-4128D2C30997",
              "versionEndIncluding": "1.6.1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:barnowl:barnowl:1.0.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "CB114CBB-A7D7-424E-A8BC-56F4BCAECEE6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:barnowl:barnowl:1.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "171619E8-3E32-4929-8944-2EC4A84CA988",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:barnowl:barnowl:1.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "684E559B-F7D9-471A-909C-2C40D301D0D2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:barnowl:barnowl:1.0.2.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "D9E30BFA-5340-4FFA-AA0F-B4AE2F3AF366",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:barnowl:barnowl:1.0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "0843A975-D31A-4EB0-8864-8F06298F2AB7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:barnowl:barnowl:1.0.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "9BA91149-6A01-4F7A-9488-DA340A46F1FD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:barnowl:barnowl:1.0.4.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "2C132719-F8DC-46D8-B289-812D576C47F6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:barnowl:barnowl:1.0.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "F59E78B1-21D0-4400-B321-640046B613E7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:barnowl:barnowl:1.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "810545B7-0F12-401F-A157-D158A6E5DAA5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:barnowl:barnowl:1.1.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "EDF4CC20-4C4B-4904-94FF-C0A1830BBBA5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:barnowl:barnowl:1.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "F6F57190-DE0A-42A9-B596-1A627E10C094",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:barnowl:barnowl:1.2.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "47644F1C-BC76-49A9-AA8D-44C1B5D47BC5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:barnowl:barnowl:1.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "66DECEAC-623D-4ADF-AD97-D3152F6B6600",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:barnowl:barnowl:1.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "2E1E88F5-7541-4002-BF3E-C5EDC8648E8E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:barnowl:barnowl:1.4:rc1:*:*:*:*:*:*",
              "matchCriteriaId": "A9032222-09C3-4E01-8008-54E03940EDBB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:barnowl:barnowl:1.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "19B58B5A-3130-4FB2-8CEE-FBF587D3B23C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:barnowl:barnowl:1.5:rc1:*:*:*:*:*:*",
              "matchCriteriaId": "AF534CFB-EBC0-4284-A047-C0D009BF2864",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:barnowl:barnowl:1.5:rc2:*:*:*:*:*:*",
              "matchCriteriaId": "1C2DA825-7B06-4368-B0E2-FBC7B86097F7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:barnowl:barnowl:1.5.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "D7C58E47-C425-42DE-BD07-EDF3237E65AC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:barnowl:barnowl:1.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "A5EA2B40-4A56-4FB5-9442-C5840DC779C7",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "BarnOwl before 1.6.2 does not check the return code of calls to the (1) ZPending and (2) ZReceiveNotice functions in libzephyr, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors."
    },
    {
      "lang": "es",
      "value": "BarnOwl anterior v1.6.2 no chequea el c\u00f3digo de vuelta de las llamadas a las funciones (1) ZPending y (2) ZReceiveNotice en libzephy, lo que permite a atacantes remotos causar una denegaci\u00f3n de servicio (ca\u00edda) y probablemente ejecutar c\u00f3digo de su elecci\u00f3n a trav\u00e9s de vectores desconocidos. \r\n"
    }
  ],
  "id": "CVE-2010-2725",
  "lastModified": "2025-04-11T00:51:21.963",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 7.5,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2010-08-05T13:23:09.557",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://barnowl.mit.edu/wiki/release-notes/1.6.2"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://github.com/barnowl/barnowl/blob/barnowl-1.6.2/ChangeLog"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://barnowl.mit.edu/wiki/release-notes/1.6.2"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://github.com/barnowl/barnowl/blob/barnowl-1.6.2/ChangeLog"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

FKIE_CVE-2010-0793

Vulnerability from fkie_nvd - Published: 2010-03-16 19:30 - Updated: 2025-04-11 00:51
Severity ?
Summary
Buffer overflow in BarnOwl before 1.5.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted CC: header.
References
cve@mitre.orghttp://barnowl.mit.edu/wiki/barnowl-1.5.1-announcePatch, Vendor Advisory
cve@mitre.orghttp://secunia.com/advisories/39908
cve@mitre.orghttp://www.debian.org/security/2010/dsa-2049
cve@mitre.orghttp://www.vupen.com/english/advisories/2010/1218
af854a3a-2127-422b-91ae-364da2661108http://barnowl.mit.edu/wiki/barnowl-1.5.1-announcePatch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/39908
af854a3a-2127-422b-91ae-364da2661108http://www.debian.org/security/2010/dsa-2049
af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2010/1218
Impacted products
Vendor Product Version
barnowl barnowl *
barnowl barnowl 1.0.0
barnowl barnowl 1.0.1
barnowl barnowl 1.0.2
barnowl barnowl 1.0.2.1
barnowl barnowl 1.0.3
barnowl barnowl 1.0.4
barnowl barnowl 1.0.4.1
barnowl barnowl 1.0.5
barnowl barnowl 1.1
barnowl barnowl 1.1.1
barnowl barnowl 1.2
barnowl barnowl 1.2.1
barnowl barnowl 1.3
barnowl barnowl 1.4
barnowl barnowl 1.4
barnowl barnowl 1.5
barnowl barnowl 1.5
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:barnowl:barnowl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "D30059EB-D2ED-43B1-9B1D-70FBEB4026DC",
              "versionEndIncluding": "1.5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:barnowl:barnowl:1.0.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "CB114CBB-A7D7-424E-A8BC-56F4BCAECEE6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:barnowl:barnowl:1.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "171619E8-3E32-4929-8944-2EC4A84CA988",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:barnowl:barnowl:1.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "684E559B-F7D9-471A-909C-2C40D301D0D2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:barnowl:barnowl:1.0.2.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "D9E30BFA-5340-4FFA-AA0F-B4AE2F3AF366",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:barnowl:barnowl:1.0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "0843A975-D31A-4EB0-8864-8F06298F2AB7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:barnowl:barnowl:1.0.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "9BA91149-6A01-4F7A-9488-DA340A46F1FD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:barnowl:barnowl:1.0.4.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "2C132719-F8DC-46D8-B289-812D576C47F6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:barnowl:barnowl:1.0.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "F59E78B1-21D0-4400-B321-640046B613E7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:barnowl:barnowl:1.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "810545B7-0F12-401F-A157-D158A6E5DAA5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:barnowl:barnowl:1.1.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "EDF4CC20-4C4B-4904-94FF-C0A1830BBBA5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:barnowl:barnowl:1.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "F6F57190-DE0A-42A9-B596-1A627E10C094",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:barnowl:barnowl:1.2.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "47644F1C-BC76-49A9-AA8D-44C1B5D47BC5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:barnowl:barnowl:1.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "66DECEAC-623D-4ADF-AD97-D3152F6B6600",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:barnowl:barnowl:1.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "2E1E88F5-7541-4002-BF3E-C5EDC8648E8E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:barnowl:barnowl:1.4:rc1:*:*:*:*:*:*",
              "matchCriteriaId": "A9032222-09C3-4E01-8008-54E03940EDBB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:barnowl:barnowl:1.5:rc1:*:*:*:*:*:*",
              "matchCriteriaId": "AF534CFB-EBC0-4284-A047-C0D009BF2864",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:barnowl:barnowl:1.5:rc2:*:*:*:*:*:*",
              "matchCriteriaId": "1C2DA825-7B06-4368-B0E2-FBC7B86097F7",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Buffer overflow in BarnOwl before 1.5.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted CC: header."
    },
    {
      "lang": "es",
      "value": "Desbordamiento de Buffer en BarnOwl anterior v1.5.1 permite a atacantes remotos causar una denegaci\u00f3n de servicio (ca\u00edda) y probablemente ejecutar c\u00f3digo de su elecci\u00f3n a trav\u00e9s de la cabecera CC: manipulada."
    }
  ],
  "id": "CVE-2010-0793",
  "lastModified": "2025-04-11T00:51:21.963",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 7.5,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2010-03-16T19:30:00.463",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://barnowl.mit.edu/wiki/barnowl-1.5.1-announce"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/39908"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.debian.org/security/2010/dsa-2049"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.vupen.com/english/advisories/2010/1218"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://barnowl.mit.edu/wiki/barnowl-1.5.1-announce"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/39908"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.debian.org/security/2010/dsa-2049"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2010/1218"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

FKIE_CVE-2009-0363

Vulnerability from fkie_nvd - Published: 2009-02-17 17:30 - Updated: 2025-04-09 00:30
Severity ?
Summary
Multiple buffer overflows in (a) BarnOwl before 1.0.5 and (b) owl 2.1.11 allow remote attackers to execute arbitrary code via vectors involving (1) a crafted zcrypt message, related to zcrypt.c; (2) a reply command on a message with a Zephyr Cc: list, related to zwrite.c; and unspecified other use of the products.
References
cve@mitre.orghttp://barnowl.mit.edu/browser/ChangeLogVendor Advisory
cve@mitre.orghttp://barnowl.mit.edu/wiki/barnowl-1.0.5-announceVendor Advisory
cve@mitre.orghttp://bugs.debian.org/515118
cve@mitre.orghttp://www.mail-archive.com/debian-testing-security-announce%40lists.debian.org/msg00173.html
cve@mitre.orghttps://bugs.launchpad.net/ubuntu/+source/owl/+bug/329165
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/48824
af854a3a-2127-422b-91ae-364da2661108http://barnowl.mit.edu/browser/ChangeLogVendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://barnowl.mit.edu/wiki/barnowl-1.0.5-announceVendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://bugs.debian.org/515118
af854a3a-2127-422b-91ae-364da2661108http://www.mail-archive.com/debian-testing-security-announce%40lists.debian.org/msg00173.html
af854a3a-2127-422b-91ae-364da2661108https://bugs.launchpad.net/ubuntu/+source/owl/+bug/329165
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/48824
Impacted products
Vendor Product Version
barnowl barnowl *
barnowl barnowl 1.0.0
barnowl barnowl 1.0.1
barnowl barnowl 1.0.2
barnowl barnowl 1.0.2.1
barnowl barnowl 1.0.3
barnowl barnowl 1.0.4
ktools owl 2.1.11
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:barnowl:barnowl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "E8B5153B-49DF-492F-B5B0-FA1F02D47FB3",
              "versionEndIncluding": "1.0.4.1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:barnowl:barnowl:1.0.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "CB114CBB-A7D7-424E-A8BC-56F4BCAECEE6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:barnowl:barnowl:1.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "171619E8-3E32-4929-8944-2EC4A84CA988",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:barnowl:barnowl:1.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "684E559B-F7D9-471A-909C-2C40D301D0D2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:barnowl:barnowl:1.0.2.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "D9E30BFA-5340-4FFA-AA0F-B4AE2F3AF366",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:barnowl:barnowl:1.0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "0843A975-D31A-4EB0-8864-8F06298F2AB7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:barnowl:barnowl:1.0.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "9BA91149-6A01-4F7A-9488-DA340A46F1FD",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ktools:owl:2.1.11:*:*:*:*:*:*:*",
              "matchCriteriaId": "33155A72-9F11-41E4-B494-8FAFFC6042E0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple buffer overflows in (a) BarnOwl before 1.0.5 and (b) owl 2.1.11 allow remote attackers to execute arbitrary code via vectors involving (1) a crafted zcrypt message, related to zcrypt.c; (2) a reply command on a message with a Zephyr Cc: list, related to zwrite.c; and unspecified other use of the products."
    },
    {
      "lang": "es",
      "value": "M\u00faltiples desbordamientos de b\u00fafer en (a) BarnOwl anterior a v1.0.5 y(b) owl v2.1.11 permiten a atacantes remotos ejecutar c\u00f3digo de su elecci\u00f3n a trav\u00e9s de vectores que implican (1) un mensaje zcrypt manipulado, relacionado con zcrypt.c; (2) un comando reply en un mensaje con una lista Cc: Zephyr, relacionado con zwrite.c; y  otros usos sin especificar de los productos."
    }
  ],
  "id": "CVE-2009-0363",
  "lastModified": "2025-04-09T00:30:58.490",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 7.5,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": true,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2009-02-17T17:30:05.890",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://barnowl.mit.edu/browser/ChangeLog"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://barnowl.mit.edu/wiki/barnowl-1.0.5-announce"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://bugs.debian.org/515118"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.mail-archive.com/debian-testing-security-announce%40lists.debian.org/msg00173.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://bugs.launchpad.net/ubuntu/+source/owl/+bug/329165"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/48824"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://barnowl.mit.edu/browser/ChangeLog"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://barnowl.mit.edu/wiki/barnowl-1.0.5-announce"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://bugs.debian.org/515118"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.mail-archive.com/debian-testing-security-announce%40lists.debian.org/msg00173.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://bugs.launchpad.net/ubuntu/+source/owl/+bug/329165"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/48824"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

CVE-2010-2725 (GCVE-0-2010-2725)

Vulnerability from cvelistv5 – Published: 2010-08-04 19:00 – Updated: 2024-09-16 18:44
VLAI?
Summary
BarnOwl before 1.6.2 does not check the return code of calls to the (1) ZPending and (2) ZReceiveNotice functions in libzephyr, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors.
Severity ?
No CVSS data available.
CWE
  • n/a
Assigner
References
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T02:46:47.249Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://github.com/barnowl/barnowl/blob/barnowl-1.6.2/ChangeLog"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://barnowl.mit.edu/wiki/release-notes/1.6.2"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "BarnOwl before 1.6.2 does not check the return code of calls to the (1) ZPending and (2) ZReceiveNotice functions in libzephyr, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2010-08-04T19:00:00Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://github.com/barnowl/barnowl/blob/barnowl-1.6.2/ChangeLog"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://barnowl.mit.edu/wiki/release-notes/1.6.2"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2010-2725",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "BarnOwl before 1.6.2 does not check the return code of calls to the (1) ZPending and (2) ZReceiveNotice functions in libzephyr, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://github.com/barnowl/barnowl/blob/barnowl-1.6.2/ChangeLog",
              "refsource": "CONFIRM",
              "url": "http://github.com/barnowl/barnowl/blob/barnowl-1.6.2/ChangeLog"
            },
            {
              "name": "http://barnowl.mit.edu/wiki/release-notes/1.6.2",
              "refsource": "CONFIRM",
              "url": "http://barnowl.mit.edu/wiki/release-notes/1.6.2"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2010-2725",
    "datePublished": "2010-08-04T19:00:00Z",
    "dateReserved": "2010-07-14T00:00:00Z",
    "dateUpdated": "2024-09-16T18:44:18.936Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2010-0793 (GCVE-0-2010-0793)

Vulnerability from cvelistv5 – Published: 2010-03-16 19:00 – Updated: 2024-08-07 00:59
VLAI?
Summary
Buffer overflow in BarnOwl before 1.5.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted CC: header.
Severity ?
No CVSS data available.
CWE
  • n/a
Assigner
References
http://www.vupen.com/english/advisories/2010/1218 vdb-entryx_refsource_VUPEN
http://barnowl.mit.edu/wiki/barnowl-1.5.1-announce x_refsource_CONFIRM
http://www.debian.org/security/2010/dsa-2049 vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/39908 third-party-advisoryx_refsource_SECUNIA
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T00:59:39.194Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "ADV-2010-1218",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1218"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://barnowl.mit.edu/wiki/barnowl-1.5.1-announce"
          },
          {
            "name": "DSA-2049",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2010/dsa-2049"
          },
          {
            "name": "39908",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/39908"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2010-03-02T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Buffer overflow in BarnOwl before 1.5.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted CC: header."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2010-04-30T09:00:00",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "ADV-2010-1218",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1218"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://barnowl.mit.edu/wiki/barnowl-1.5.1-announce"
        },
        {
          "name": "DSA-2049",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2010/dsa-2049"
        },
        {
          "name": "39908",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/39908"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2010-0793",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Buffer overflow in BarnOwl before 1.5.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted CC: header."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "ADV-2010-1218",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1218"
            },
            {
              "name": "http://barnowl.mit.edu/wiki/barnowl-1.5.1-announce",
              "refsource": "CONFIRM",
              "url": "http://barnowl.mit.edu/wiki/barnowl-1.5.1-announce"
            },
            {
              "name": "DSA-2049",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2010/dsa-2049"
            },
            {
              "name": "39908",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/39908"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2010-0793",
    "datePublished": "2010-03-16T19:00:00",
    "dateReserved": "2010-03-02T00:00:00",
    "dateUpdated": "2024-08-07T00:59:39.194Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2009-0363 (GCVE-0-2009-0363)

Vulnerability from cvelistv5 – Published: 2009-02-17 17:00 – Updated: 2024-08-07 04:31
VLAI?
Summary
Multiple buffer overflows in (a) BarnOwl before 1.0.5 and (b) owl 2.1.11 allow remote attackers to execute arbitrary code via vectors involving (1) a crafted zcrypt message, related to zcrypt.c; (2) a reply command on a message with a Zephyr Cc: list, related to zwrite.c; and unspecified other use of the products.
Severity ?
No CVSS data available.
CWE
  • n/a
Assigner
References
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T04:31:25.616Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://barnowl.mit.edu/wiki/barnowl-1.0.5-announce"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.launchpad.net/ubuntu/+source/owl/+bug/329165"
          },
          {
            "name": "[debian-testing-security-announce] 20090213 Security update for Debian Testing - 2009-02-14",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.mail-archive.com/debian-testing-security-announce%40lists.debian.org/msg00173.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugs.debian.org/515118"
          },
          {
            "name": "barnowl-owl-zcrypt-bo(48824)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/48824"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://barnowl.mit.edu/browser/ChangeLog"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-02-13T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple buffer overflows in (a) BarnOwl before 1.0.5 and (b) owl 2.1.11 allow remote attackers to execute arbitrary code via vectors involving (1) a crafted zcrypt message, related to zcrypt.c; (2) a reply command on a message with a Zephyr Cc: list, related to zwrite.c; and unspecified other use of the products."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-08-07T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://barnowl.mit.edu/wiki/barnowl-1.0.5-announce"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.launchpad.net/ubuntu/+source/owl/+bug/329165"
        },
        {
          "name": "[debian-testing-security-announce] 20090213 Security update for Debian Testing - 2009-02-14",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.mail-archive.com/debian-testing-security-announce%40lists.debian.org/msg00173.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugs.debian.org/515118"
        },
        {
          "name": "barnowl-owl-zcrypt-bo(48824)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/48824"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://barnowl.mit.edu/browser/ChangeLog"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2009-0363",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple buffer overflows in (a) BarnOwl before 1.0.5 and (b) owl 2.1.11 allow remote attackers to execute arbitrary code via vectors involving (1) a crafted zcrypt message, related to zcrypt.c; (2) a reply command on a message with a Zephyr Cc: list, related to zwrite.c; and unspecified other use of the products."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://barnowl.mit.edu/wiki/barnowl-1.0.5-announce",
              "refsource": "CONFIRM",
              "url": "http://barnowl.mit.edu/wiki/barnowl-1.0.5-announce"
            },
            {
              "name": "https://bugs.launchpad.net/ubuntu/+source/owl/+bug/329165",
              "refsource": "CONFIRM",
              "url": "https://bugs.launchpad.net/ubuntu/+source/owl/+bug/329165"
            },
            {
              "name": "[debian-testing-security-announce] 20090213 Security update for Debian Testing - 2009-02-14",
              "refsource": "MLIST",
              "url": "http://www.mail-archive.com/debian-testing-security-announce@lists.debian.org/msg00173.html"
            },
            {
              "name": "http://bugs.debian.org/515118",
              "refsource": "CONFIRM",
              "url": "http://bugs.debian.org/515118"
            },
            {
              "name": "barnowl-owl-zcrypt-bo(48824)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/48824"
            },
            {
              "name": "http://barnowl.mit.edu/browser/ChangeLog",
              "refsource": "CONFIRM",
              "url": "http://barnowl.mit.edu/browser/ChangeLog"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2009-0363",
    "datePublished": "2009-02-17T17:00:00",
    "dateReserved": "2009-01-29T00:00:00",
    "dateUpdated": "2024-08-07T04:31:25.616Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2010-2725 (GCVE-0-2010-2725)

Vulnerability from nvd – Published: 2010-08-04 19:00 – Updated: 2024-09-16 18:44
VLAI?
Summary
BarnOwl before 1.6.2 does not check the return code of calls to the (1) ZPending and (2) ZReceiveNotice functions in libzephyr, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors.
Severity ?
No CVSS data available.
CWE
  • n/a
Assigner
References
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T02:46:47.249Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://github.com/barnowl/barnowl/blob/barnowl-1.6.2/ChangeLog"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://barnowl.mit.edu/wiki/release-notes/1.6.2"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "BarnOwl before 1.6.2 does not check the return code of calls to the (1) ZPending and (2) ZReceiveNotice functions in libzephyr, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2010-08-04T19:00:00Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://github.com/barnowl/barnowl/blob/barnowl-1.6.2/ChangeLog"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://barnowl.mit.edu/wiki/release-notes/1.6.2"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2010-2725",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "BarnOwl before 1.6.2 does not check the return code of calls to the (1) ZPending and (2) ZReceiveNotice functions in libzephyr, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://github.com/barnowl/barnowl/blob/barnowl-1.6.2/ChangeLog",
              "refsource": "CONFIRM",
              "url": "http://github.com/barnowl/barnowl/blob/barnowl-1.6.2/ChangeLog"
            },
            {
              "name": "http://barnowl.mit.edu/wiki/release-notes/1.6.2",
              "refsource": "CONFIRM",
              "url": "http://barnowl.mit.edu/wiki/release-notes/1.6.2"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2010-2725",
    "datePublished": "2010-08-04T19:00:00Z",
    "dateReserved": "2010-07-14T00:00:00Z",
    "dateUpdated": "2024-09-16T18:44:18.936Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2010-0793 (GCVE-0-2010-0793)

Vulnerability from nvd – Published: 2010-03-16 19:00 – Updated: 2024-08-07 00:59
VLAI?
Summary
Buffer overflow in BarnOwl before 1.5.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted CC: header.
Severity ?
No CVSS data available.
CWE
  • n/a
Assigner
References
http://www.vupen.com/english/advisories/2010/1218 vdb-entryx_refsource_VUPEN
http://barnowl.mit.edu/wiki/barnowl-1.5.1-announce x_refsource_CONFIRM
http://www.debian.org/security/2010/dsa-2049 vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/39908 third-party-advisoryx_refsource_SECUNIA
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T00:59:39.194Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "ADV-2010-1218",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1218"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://barnowl.mit.edu/wiki/barnowl-1.5.1-announce"
          },
          {
            "name": "DSA-2049",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2010/dsa-2049"
          },
          {
            "name": "39908",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/39908"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2010-03-02T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Buffer overflow in BarnOwl before 1.5.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted CC: header."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2010-04-30T09:00:00",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "ADV-2010-1218",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1218"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://barnowl.mit.edu/wiki/barnowl-1.5.1-announce"
        },
        {
          "name": "DSA-2049",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2010/dsa-2049"
        },
        {
          "name": "39908",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/39908"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2010-0793",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Buffer overflow in BarnOwl before 1.5.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted CC: header."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "ADV-2010-1218",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1218"
            },
            {
              "name": "http://barnowl.mit.edu/wiki/barnowl-1.5.1-announce",
              "refsource": "CONFIRM",
              "url": "http://barnowl.mit.edu/wiki/barnowl-1.5.1-announce"
            },
            {
              "name": "DSA-2049",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2010/dsa-2049"
            },
            {
              "name": "39908",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/39908"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2010-0793",
    "datePublished": "2010-03-16T19:00:00",
    "dateReserved": "2010-03-02T00:00:00",
    "dateUpdated": "2024-08-07T00:59:39.194Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2009-0363 (GCVE-0-2009-0363)

Vulnerability from nvd – Published: 2009-02-17 17:00 – Updated: 2024-08-07 04:31
VLAI?
Summary
Multiple buffer overflows in (a) BarnOwl before 1.0.5 and (b) owl 2.1.11 allow remote attackers to execute arbitrary code via vectors involving (1) a crafted zcrypt message, related to zcrypt.c; (2) a reply command on a message with a Zephyr Cc: list, related to zwrite.c; and unspecified other use of the products.
Severity ?
No CVSS data available.
CWE
  • n/a
Assigner
References
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T04:31:25.616Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://barnowl.mit.edu/wiki/barnowl-1.0.5-announce"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.launchpad.net/ubuntu/+source/owl/+bug/329165"
          },
          {
            "name": "[debian-testing-security-announce] 20090213 Security update for Debian Testing - 2009-02-14",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.mail-archive.com/debian-testing-security-announce%40lists.debian.org/msg00173.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugs.debian.org/515118"
          },
          {
            "name": "barnowl-owl-zcrypt-bo(48824)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/48824"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://barnowl.mit.edu/browser/ChangeLog"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-02-13T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple buffer overflows in (a) BarnOwl before 1.0.5 and (b) owl 2.1.11 allow remote attackers to execute arbitrary code via vectors involving (1) a crafted zcrypt message, related to zcrypt.c; (2) a reply command on a message with a Zephyr Cc: list, related to zwrite.c; and unspecified other use of the products."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-08-07T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://barnowl.mit.edu/wiki/barnowl-1.0.5-announce"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.launchpad.net/ubuntu/+source/owl/+bug/329165"
        },
        {
          "name": "[debian-testing-security-announce] 20090213 Security update for Debian Testing - 2009-02-14",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.mail-archive.com/debian-testing-security-announce%40lists.debian.org/msg00173.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugs.debian.org/515118"
        },
        {
          "name": "barnowl-owl-zcrypt-bo(48824)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/48824"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://barnowl.mit.edu/browser/ChangeLog"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2009-0363",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple buffer overflows in (a) BarnOwl before 1.0.5 and (b) owl 2.1.11 allow remote attackers to execute arbitrary code via vectors involving (1) a crafted zcrypt message, related to zcrypt.c; (2) a reply command on a message with a Zephyr Cc: list, related to zwrite.c; and unspecified other use of the products."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://barnowl.mit.edu/wiki/barnowl-1.0.5-announce",
              "refsource": "CONFIRM",
              "url": "http://barnowl.mit.edu/wiki/barnowl-1.0.5-announce"
            },
            {
              "name": "https://bugs.launchpad.net/ubuntu/+source/owl/+bug/329165",
              "refsource": "CONFIRM",
              "url": "https://bugs.launchpad.net/ubuntu/+source/owl/+bug/329165"
            },
            {
              "name": "[debian-testing-security-announce] 20090213 Security update for Debian Testing - 2009-02-14",
              "refsource": "MLIST",
              "url": "http://www.mail-archive.com/debian-testing-security-announce@lists.debian.org/msg00173.html"
            },
            {
              "name": "http://bugs.debian.org/515118",
              "refsource": "CONFIRM",
              "url": "http://bugs.debian.org/515118"
            },
            {
              "name": "barnowl-owl-zcrypt-bo(48824)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/48824"
            },
            {
              "name": "http://barnowl.mit.edu/browser/ChangeLog",
              "refsource": "CONFIRM",
              "url": "http://barnowl.mit.edu/browser/ChangeLog"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2009-0363",
    "datePublished": "2009-02-17T17:00:00",
    "dateReserved": "2009-01-29T00:00:00",
    "dateUpdated": "2024-08-07T04:31:25.616Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}