Summary
The remote host is missing an update to the system as announced in the referenced advisory.
Solution
Update your system with the appropriate patches or software upgrades.
http://bogofilter.sourceforge.net/security/bogofilter-SA-2010-01 http://www.vuxml.org/freebsd/25ed4ff8-8940-11df-a339-0026189baca3.html
Insight
The following packages are affected:
bogofilter
bogofilter-sqlite
bogofilter-tc
CVE-2010-2494
Multiple buffer underflows in the base64 decoder in base64.c in (1) bogofilter and (2) bogolexer in bogofilter before 1.2.2 allow remote attackers to cause a denial of service (heap memory corruption and application crash) via an e-mail message with invalid base64 data that begins with an = (equals) character.
Severity
Classification
-
CVE CVE-2010-2494 -
CVSS Base Score: 5.0
AV:N/AC:L/Au:N/C:N/I:N/A:P
Related Vulnerabilities