National Cyber Awareness System

Vulnerability Summary for CVE-2009-0582

Overview

The ntlm_challenge function in the NTLM SASL authentication mechanism in camel/camel-sasl-ntlm.c in Camel in Evolution Data Server (aka evolution-data-server) 2.24.5 and earlier, and 2.25.92 and earlier 2.25.x versions, does not validate whether a certain length value is consistent with the amount of data in a challenge packet, which allows remote mail servers to read information from the process memory of a client, or cause a denial of service (client crash), via an NTLM authentication type 2 packet with a length value that exceeds the amount of packet data.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: FEDORA

Name: FEDORA-2009-2792

Hyperlink:https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00672.html

External Source: FEDORA

Name: FEDORA-2009-2784

Hyperlink:https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00666.html

External Source: CONFIRM

Name: https://bugzilla.redhat.com/show_bug.cgi?id=487685

Hyperlink:https://bugzilla.redhat.com/show_bug.cgi?id=487685

External Source: XF

Name: evolution-ntlmsasl-info-disclosure(49233)

Hyperlink:http://xforce.iss.net/xforce/xfdb/49233

External Source: VUPEN

Name: ADV-2009-0716

Hyperlink:http://www.vupen.com/english/advisories/2009/0716

External Source: BID

Name: 34109

Hyperlink:http://www.securityfocus.com/bid/34109

External Source: REDHAT

Name: RHSA-2009:0358

Hyperlink:http://www.redhat.com/support/errata/RHSA-2009-0358.html

External Source: REDHAT

Name: RHSA-2009:0355

Hyperlink:http://www.redhat.com/support/errata/RHSA-2009-0355.html

External Source: REDHAT

Name: RHSA-2009:0354

Hyperlink:http://www.redhat.com/support/errata/RHSA-2009-0354.html

External Source: MANDRIVA

Name: MDVSA-2009:078

Hyperlink:http://www.mandriva.com/security/advisories?name=MDVSA-2009:078

External Source: DEBIAN

Name: DSA-1813

Hyperlink:http://www.debian.org/security/2009/dsa-1813

External Source: SECTRACK

Name: 1021845

Hyperlink:http://securitytracker.com/id?1021845

External Source: SECUNIA

Name: 35357

Hyperlink:http://secunia.com/advisories/35357

External Source: SECUNIA

Name: 35065

Hyperlink:http://secunia.com/advisories/35065

External Source: SECUNIA

Name: 34363

Hyperlink:http://secunia.com/advisories/34363

External Source: SECUNIA

Name: 34348

Hyperlink:http://secunia.com/advisories/34348

External Source: SECUNIA

Name: 34339

Hyperlink:http://secunia.com/advisories/34339

External Source: SECUNIA

Name: 34338

Hyperlink:http://secunia.com/advisories/34338

External Source: SECUNIA

Name: 34286

Type: Advisory

Hyperlink:http://secunia.com/advisories/34286

External Source: OVAL

Name: oval:org.mitre.oval:def:10081

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10081

External Source: OSVDB

Name: 52673

Hyperlink:http://osvdb.org/52673

External Source: MLIST

Name: [release-team] 20090312 Another Evolution-Data-Server freeze break

Hyperlink:http://mail.gnome.org/archives/release-team/2009-March/msg00096.html

External Source: SUSE

Name: SUSE-SR:2009:010

Hyperlink:http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html

References to Check Content

Identifier:oval:org.mitre.oval:def:10081

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:10081