• info
• discussion
• exploit
• solution
• references

BarnOwl 'owl_message_get_cc_without_recipient()' Heap Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references for more information.


Debian Linux 5.0 hppa

• Debian barnowl-irc_1.0.1-4+lenny1_all.deb
  http://security.debian.org/pool/updates/main/b/barnowl/barnowl-irc_1.0 .1-4+lenny1_all.deb


• Debian barnowl_1.0.1-4+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/b/barnowl/barnowl_1.0.1-4 +lenny1_hppa.deb

Debian Linux 5.0 ia-64

• Debian barnowl-irc_1.0.1-4+lenny1_all.deb
  http://security.debian.org/pool/updates/main/b/barnowl/barnowl-irc_1.0 .1-4+lenny1_all.deb


• Debian barnowl_1.0.1-4+lenny1_ia64.deb
  http://security.debian.org/pool/updates/main/b/barnowl/barnowl_1.0.1-4 +lenny1_ia64.deb

Debian Linux 5.0 m68k

• Debian barnowl-irc_1.0.1-4+lenny1_all.deb
  http://security.debian.org/pool/updates/main/b/barnowl/barnowl-irc_1.0 .1-4+lenny1_all.deb

Debian Linux 5.0 arm

• Debian barnowl-irc_1.0.1-4+lenny1_all.deb
  http://security.debian.org/pool/updates/main/b/barnowl/barnowl-irc_1.0 .1-4+lenny1_all.deb


• Debian barnowl_1.0.1-4+lenny1_arm.deb
  http://security.debian.org/pool/updates/main/b/barnowl/barnowl_1.0.1-4 +lenny1_arm.deb

Debian Linux 5.0 armel

• Debian barnowl-irc_1.0.1-4+lenny1_all.deb
  http://security.debian.org/pool/updates/main/b/barnowl/barnowl-irc_1.0 .1-4+lenny1_all.deb

Debian Linux 5.0

• Debian barnowl-irc_1.0.1-4+lenny1_all.deb
  http://security.debian.org/pool/updates/main/b/barnowl/barnowl-irc_1.0 .1-4+lenny1_all.deb

Debian Linux 5.0 alpha

• Debian barnowl-irc_1.0.1-4+lenny1_all.deb
  http://security.debian.org/pool/updates/main/b/barnowl/barnowl-irc_1.0 .1-4+lenny1_all.deb


• Debian barnowl_1.0.1-4+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/b/barnowl/barnowl_1.0.1-4 +lenny1_alpha.deb

Debian Linux 5.0 amd64

• Debian barnowl-irc_1.0.1-4+lenny1_all.deb
  http://security.debian.org/pool/updates/main/b/barnowl/barnowl-irc_1.0 .1-4+lenny1_all.deb


• Debian barnowl_1.0.1-4+lenny1_amd64.deb
  http://security.debian.org/pool/updates/main/b/barnowl/barnowl_1.0.1-4 +lenny1_amd64.deb

Debian Linux 5.0 ia-32

• Debian barnowl-irc_1.0.1-4+lenny1_all.deb
  http://security.debian.org/pool/updates/main/b/barnowl/barnowl-irc_1.0 .1-4+lenny1_all.deb


• Debian barnowl_1.0.1-4+lenny1_i386.deb
  http://security.debian.org/pool/updates/main/b/barnowl/barnowl_1.0.1-4 +lenny1_i386.deb

Debian Linux 5.0 mips

• Debian barnowl-irc_1.0.1-4+lenny1_all.deb
  http://security.debian.org/pool/updates/main/b/barnowl/barnowl-irc_1.0 .1-4+lenny1_all.deb


• Debian barnowl_1.0.1-4+lenny1_mips.deb
  http://security.debian.org/pool/updates/main/b/barnowl/barnowl_1.0.1-4 +lenny1_mips.deb

Debian Linux 5.0 s/390

• Debian barnowl-irc_1.0.1-4+lenny1_all.deb
  http://security.debian.org/pool/updates/main/b/barnowl/barnowl-irc_1.0 .1-4+lenny1_all.deb


• Debian barnowl_1.0.1-4+lenny1_s390.deb
  http://security.debian.org/pool/updates/main/b/barnowl/barnowl_1.0.1-4 +lenny1_s390.deb

Debian Linux 5.0 mipsel

• Debian barnowl-irc_1.0.1-4+lenny1_all.deb
  http://security.debian.org/pool/updates/main/b/barnowl/barnowl-irc_1.0 .1-4+lenny1_all.deb

Debian Linux 5.0 powerpc

• Debian barnowl-irc_1.0.1-4+lenny1_all.deb
  http://security.debian.org/pool/updates/main/b/barnowl/barnowl-irc_1.0 .1-4+lenny1_all.deb


• Debian barnowl_1.0.1-4+lenny1_powerpc.deb
  http://security.debian.org/pool/updates/main/b/barnowl/barnowl_1.0.1-4 +lenny1_powerpc.deb

Debian Linux 5.0 sparc

• Debian barnowl-irc_1.0.1-4+lenny1_all.deb
  http://security.debian.org/pool/updates/main/b/barnowl/barnowl-irc_1.0 .1-4+lenny1_all.deb


• Debian barnowl_1.0.1-4+lenny1_sparc.deb
  http://security.debian.org/pool/updates/main/b/barnowl/barnowl_1.0.1-4 +lenny1_sparc.deb

MIT BarnOwl 1.0.4

• MIT barnowl-1.5.1-src.tgz
  http://barnowl.mit.edu/dist/barnowl-1.5.1-src.tgz

MIT BarnOwl 1.0.5

• MIT barnowl-1.5.1-src.tgz
  http://barnowl.mit.edu/dist/barnowl-1.5.1-src.tgz

MIT BarnOwl 1.5

• MIT barnowl-1.5.1-src.tgz
  http://barnowl.mit.edu/dist/barnowl-1.5.1-src.tgz