#42862 [Asn->Opn]: [PATCH]IMAP toolkit crash: rfc822.c legacy routine buffer overflow

ID: 42862 Updated by: jani@php.net -Summary: IMAP toolkit crash: rfc822.c legacy routine buffer, overflow Reported By: Maylein at ub dot uni-heidelberg dot de -Status: Assigned +Status: Open Bug Type: IMAP related -Operating System: Linux 2.6.22 +Operating System: * -PHP Version: 5.2.4 +PHP Version: 5.2.6 Assigned To: iliaa Previous Comments: ------------------------------------------------------------------------ [2008-07-08 18:27:11] david at blue-labs dot org please fix 008_imap-bufferoverflows.patch to include the typedef for RFC822BUFFER. /* Output buffering for RFC [2]822 */ typedef long (*soutr_t) (void *stream,char *string); typedef struct rfc822buffer { soutr_t f; /* I/O flush routine */ void *s; /* stream for I/O routine */ char *beg; /* start of buffer */ char *cur; /* current buffer pointer */ char *end; /* end of buffer */ } RFC822BUFFER; ------------------------------------------------------------------------ [2008-06-24 10:54:50] hoffie at gentoo dot org This is CVE-2008-2829. ------------------------------------------------------------------------ [2008-06-18 17:43:50] hoffie at gentoo dot org Over 7 months and two releases have passed, yet no developer even commented on this *security* issue (according to the c-client devs). So what's up with this, are there any problems with the patch? If yes, would you mind pointing them out, so that one can try to fix them? ------------------------------------------------------------------------ [2008-05-27 13:06:39] falon at csi dot it I use Horde Groupware Webmail Edition 1.0.6 with Apache/1.3.41 (Unix) PHP/5.2.5 mod_ssl/2.8.31 OpenSSL/0.9.8g. I had the same bug. I tried sborril patch: it fix the problem also in my environment. I appreciate if could be added to next release of php. Regards ------------------------------------------------------------------------ [2008-04-03 21:55:29] pubear at u dot washington dot edu I am using imap c-client 2007a with php-5.2.5. I am working with an extensively modified version of: http://migrationtool.sourceforge.net I ran into this issue migrating people's mailboxes in Exchange Server. I wanted to confirm that the patch submitted by sborrill at precedence dot co dot uk appears to have fixed the buffer overflow bug. Thank you very much. ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at http://bugs.php.net/42862 -- Edit this bug report at http://bugs.php.net/?id=42862&edit=1