PGP Desktop Filename Buffer Overflow Vulnerability

Bugtraq ID:	5656
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Sep 05 2002 12:00AM
Updated:	Sep 05 2002 12:00AM
Credit:	Discovered by Tony Bettini <tony.bettini@foundstone.com> of Foundstone.
Vulnerable:	Network Associates PGP Freeware 7.0.3 - Apple Mac OS 9 9.0 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 SR2 - Microsoft Windows 98 b - Microsoft Windows 98 - Microsoft Windows 98SE - Microsoft Windows ME - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 Network Associates PGP Corporate Desktop 7.1.1 Network Associates PGP Corporate Desktop 7.1 - Apple Mac OS 9 9.0 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 SR2 - Microsoft Windows 98 b - Microsoft Windows 98 - Microsoft Windows 98SE - Microsoft Windows ME - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 Network Associates PGP 7.1.1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows ME - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 Network Associates PGP 7.1 Network Associates PGP 7.0.4 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 Network Associates PGP 7.0.3 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 Network Associates PGP 7.0 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows ME - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 Network Associates PGP 6.5.8 - HP HP-UX 10.0 - IBM AIX 4.3 - Linux kernel 2.3 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 - RedHat Linux 7.0 - Sun Solaris 8_sparc Network Associates PGP 6.5.3 i for Windows - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 Network Associates PGP 6.5.3 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 Network Associates PGP 6.5.1 i - HP HP-UX 11.0 - IBM AIX 4.3 - Linux kernel 2.3 - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 - RedHat Linux 7.0 - Sun Solaris 8_sparc Network Associates PGP 6.0.2 i - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 Network Associates PGP 6.0.2 - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 Network Associates PGP 5.5.5 - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 Network Associates PGP 5.5.3 i for Windows - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 Network Associates PGP 5.0 i - HP HP-UX 11.0 - IBM AIX 4.3 - Linux kernel 2.3 - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 - RedHat Linux 7.0 - Sun Solaris 8_sparc Network Associates PGP 5.0 - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0

Not Vulnerable: