Vulnerability Details : CVE-2009-0582
The ntlm_challenge function in the NTLM SASL authentication mechanism in camel/camel-sasl-ntlm.c in Camel in Evolution Data Server (aka evolution-data-server) 2.24.5 and earlier, and 2.25.92 and earlier 2.25.x versions, does not validate whether a certain length value is consistent with the amount of data in a challenge packet, which allows remote mail servers to read information from the process memory of a client, or cause a denial of service (client crash), via an NTLM authentication type 2 packet with a length value that exceeds the amount of packet data.
Vulnerability category: Input validationDenial of service
Exploit prediction scoring system (EPSS) score for CVE-2009-0582
Probability of exploitation activity in the next 30 days: 0.27%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 63 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2009-0582
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
---|---|---|---|---|---|
5.8
|
MEDIUM | AV:N/AC:M/Au:N/C:P/I:N/A:P |
8.6
|
4.9
|
NIST |
CWE ids for CVE-2009-0582
-
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.Assigned by: nvd@nist.gov (Primary)
References for CVE-2009-0582
- http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html
-
http://www.vupen.com/english/advisories/2009/0716
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:078
-
https://bugzilla.redhat.com/show_bug.cgi?id=487685
- http://www.redhat.com/support/errata/RHSA-2009-0354.html
- http://www.debian.org/security/2009/dsa-1813
-
http://www.securityfocus.com/bid/34109
- https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00666.html
- http://www.redhat.com/support/errata/RHSA-2009-0355.html
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/49233
-
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10081
- http://www.redhat.com/support/errata/RHSA-2009-0358.html
- https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00672.html
-
http://securitytracker.com/id?1021845
-
http://mail.gnome.org/archives/release-team/2009-March/msg00096.html
Products affected by CVE-2009-0582
- cpe:2.3:a:gnome:evolution-data-server:*:*:*:*:*:*:*:*
- cpe:2.3:a:gnome:evolution-data-server:2.25.92:*:*:*:*:*:*:*