多个供应商MIME-aware Mail以及News Clients漏洞

漏洞信息详情

多个供应商MIME-aware Mail以及News Clients漏洞

• CNNVD编号：CNNVD-199712-011
• 危害等级： 中危
  
  
• CVE编号：
  CVE-1999-0004
  
• 漏洞类型：
  
  
  缓冲区溢出
  
• 发布时间：
  
  1997-12-16
  
• 威胁类型：
  
  
  远程
  
• 更新时间：
  
  2005-10-20
  
• 厂        商：
  
  sco
• 漏洞来源：
  The vulnerability …

电子邮件客户端中存在MIME缓冲区溢出漏洞，例如：mailtool以及Outlook。

Patches and upgrades exist for most of the popular packages which were affected by this problem. CERT advisory CA-98.10.mime_buffer_overflows details individual vendor responses to the problem. In addition, it gives references to a number of solutions that allow for the eilimination of externally originating mail attempting to exploit this vulnerability by utilizing filtering at the SMTP server. These solutions, however, should not be considered a solution, but rather a temporary measure until all possibly affected systems can be patched.
Mutt versions up to and including 0.93.1(i) are vulnerable. The bug has been fixed as of mutt 0.93.2(i). A patch was distributed on Usenet on July 29, 1998.
Users of older versions should upgrade as soon as possible. Mutt 0.93.2(i) is available from ftp://ftp.guug.de/pub/mutt/

来源: MS
名称: MS98-008
链接:http://www.microsoft.com/technet/security/bulletin/ms98-008.asp