CVE-2007-5007
published 2007-12-12CVE-2007-5007: Stack-based buffer overflow in the ir_fetch_seq function in balsa before 2.3.20 might allow remote IMAP servers to execute arbitrary code via a long response…
PriorityP434medium6.8CVSS 2.0
AVNACMAuNCPIPAP
EPSS
3.89%
89.1th percentile
Stack-based buffer overflow in the ir_fetch_seq function in balsa before 2.3.20 might allow remote IMAP servers to execute arbitrary code via a long response to a FETCH command.
Affected
45 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | balsa | < balsa 2.3.20-1 (bookworm) | balsa 2.3.20-1 (bookworm) |
| gnome | balsa | — | — |
| gnome | balsa | — | — |
| gnome | balsa | — | — |
| gnome | balsa | — | — |
| gnome | balsa | — | — |
| gnome | balsa | — | — |
| gnome | balsa | — | — |
| gnome | balsa | — | — |
| gnome | balsa | — | — |
| gnome | balsa | — | — |
| gnome | balsa | — | — |
| gnome | balsa | — | — |
| gnome | balsa | — | — |
| gnome | balsa | — | — |
| gnome | balsa | — | — |
| gnome | balsa | — | — |
| gnome | balsa | — | — |
| gnome | balsa | — | — |
| gnome | balsa | — | — |
| gnome | balsa | — | — |
| gnome | balsa | — | — |
| gnome | balsa | — | — |
| gnome | balsa | — | — |
| gnome | balsa | — | — |
CVSS provenance
nvdv2.06.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
osv6.8MEDIUM
vendor_debian6.8LOW
vendor_redhat6.8MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-42g6-c5f2-p9f3: Stack-based buffer overflow in the ir_fetch_seq function in balsa before 2
ghsa_unreviewed·2022-05-01
CVE-2007-5007 [MEDIUM] CWE-119 GHSA-42g6-c5f2-p9f3: Stack-based buffer overflow in the ir_fetch_seq function in balsa before 2
Stack-based buffer overflow in the ir_fetch_seq function in balsa before 2.3.20 might allow remote IMAP servers to execute arbitrary code via a long response to a FETCH command.
OSV
CVE-2007-5007: Stack-based buffer overflow in the ir_fetch_seq function in balsa before 2
osv·2007-12-12·CVSS 6.8
CVE-2007-5007 [MEDIUM] CVE-2007-5007: Stack-based buffer overflow in the ir_fetch_seq function in balsa before 2
Stack-based buffer overflow in the ir_fetch_seq function in balsa before 2.3.20 might allow remote IMAP servers to execute arbitrary code via a long response to a FETCH command.
Red Hat
balsa: IMAP server triggerred stack overflow
vendor_redhat·2007-09-06·CVSS 6.8
CVE-2007-5007 [MEDIUM] balsa: IMAP server triggerred stack overflow
balsa: IMAP server triggerred stack overflow
Stack-based buffer overflow in the ir_fetch_seq function in balsa before 2.3.20 might allow remote IMAP servers to execute arbitrary code via a long response to a FETCH command.
Statement: Not vulnerable. This issue did not affect version of balsa as shipped with Red Hat Enterprise Linux 2.1.
Debian
CVE-2007-5007: balsa - Stack-based buffer overflow in the ir_fetch_seq function in balsa before 2.3.20 ...
vendor_debian·2007·CVSS 6.8
CVE-2007-5007 [MEDIUM] CVE-2007-5007: balsa - Stack-based buffer overflow in the ir_fetch_seq function in balsa before 2.3.20 ...
Stack-based buffer overflow in the ir_fetch_seq function in balsa before 2.3.20 might allow remote IMAP servers to execute arbitrary code via a long response to a FETCH command.
Scope: local
bookworm: resolved (fixed in 2.3.20-1)
bullseye: resolved (fixed in 2.3.20-1)
forky: resolved (fixed in 2.3.20-1)
sid: resolved (fixed in 2.3.20-1)
trixie: resolved (fixed in 2.3.20-1)
No detection rules found.
No public exploits indexed.
http://bugs.gentoo.org/show_bug.cgi?id=193179http://bugzilla.gnome.org/show_bug.cgi?id=474366http://mail.gnome.org/archives/balsa-list/2007-September/msg00010.htmlhttp://osvdb.org/40585http://secunia.com/advisories/26947http://secunia.com/advisories/26987http://secunia.com/advisories/27272http://www.gentoo.org/security/en/glsa/glsa-200710-17.xmlhttp://www.novell.com/linux/security/advisories/2007_19_sr.htmlhttp://www.securityfocus.com/bid/25777http://www.vupen.com/english/advisories/2007/3263https://bugzilla.redhat.com/show_bug.cgi?id=297581http://bugs.gentoo.org/show_bug.cgi?id=193179http://bugzilla.gnome.org/show_bug.cgi?id=474366http://mail.gnome.org/archives/balsa-list/2007-September/msg00010.htmlhttp://osvdb.org/40585http://secunia.com/advisories/26947http://secunia.com/advisories/26987http://secunia.com/advisories/27272http://www.gentoo.org/security/en/glsa/glsa-200710-17.xmlhttp://www.novell.com/linux/security/advisories/2007_19_sr.htmlhttp://www.securityfocus.com/bid/25777http://www.vupen.com/english/advisories/2007/3263https://bugzilla.redhat.com/show_bug.cgi?id=297581
2007-12-12
Published