« Volver al listado

CVE-2009-0363

Estado: ModificadaAlta (7.5)—

Multiple buffer overflows in (a) BarnOwl before 1.0.5 and (b) owl 2.1.11 allow remote attackers to execute arbitrary code via vectors involving (1) a crafted zcrypt message, related to zcrypt.c; (2) a reply command on a message with a Zephyr Cc: list, related to zwrite.c; and unspecified other use of the products.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Barnowl — BarnowlKtools — OWL

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2009-0363",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": true,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2009-02-17T17:30:05.890",
  "references": [
    {
      "url": "http://barnowl.mit.edu/browser/ChangeLog",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://barnowl.mit.edu/wiki/barnowl-1.0.5-announce",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://bugs.debian.org/515118",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.mail-archive.com/debian-testing-security-announce%40lists.debian.org/msg00173.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://bugs.launchpad.net/ubuntu/+source/owl/+bug/329165",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/48824",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://barnowl.mit.edu/browser/ChangeLog",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://barnowl.mit.edu/wiki/barnowl-1.0.5-announce",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://bugs.debian.org/515118",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.mail-archive.com/debian-testing-security-announce%40lists.debian.org/msg00173.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://bugs.launchpad.net/ubuntu/+source/owl/+bug/329165",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/48824",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple buffer overflows in (a) BarnOwl before 1.0.5 and (b) owl 2.1.11 allow remote attackers to execute arbitrary code via vectors involving (1) a crafted zcrypt message, related to zcrypt.c; (2) a reply command on a message with a Zephyr Cc: list, related to zwrite.c; and unspecified other use of the products."
    },
    {
      "lang": "es",
      "value": "Múltiples desbordamientos de búfer en (a) BarnOwl anterior a v1.0.5 y(b) owl v2.1.11 permiten a atacantes remotos ejecutar código de su elección a través de vectores que implican (1) un mensaje zcrypt manipulado, relacionado con zcrypt.c; (2) un comando reply en un mensaje con una lista Cc: Zephyr, relacionado con zwrite.c; y  otros usos sin especificar de los productos."
    }
  ],
  "lastModified": "2026-06-16T23:04:52.183",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:barnowl:barnowl:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E8B5153B-49DF-492F-B5B0-FA1F02D47FB3",
              "versionEndIncluding": "1.0.4.1"
            },
            {
              "criteria": "cpe:2.3:a:barnowl:barnowl:1.0.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CB114CBB-A7D7-424E-A8BC-56F4BCAECEE6"
            },
            {
              "criteria": "cpe:2.3:a:barnowl:barnowl:1.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "171619E8-3E32-4929-8944-2EC4A84CA988"
            },
            {
              "criteria": "cpe:2.3:a:barnowl:barnowl:1.0.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "684E559B-F7D9-471A-909C-2C40D301D0D2"
            },
            {
              "criteria": "cpe:2.3:a:barnowl:barnowl:1.0.2.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D9E30BFA-5340-4FFA-AA0F-B4AE2F3AF366"
            },
            {
              "criteria": "cpe:2.3:a:barnowl:barnowl:1.0.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0843A975-D31A-4EB0-8864-8F06298F2AB7"
            },
            {
              "criteria": "cpe:2.3:a:barnowl:barnowl:1.0.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9BA91149-6A01-4F7A-9488-DA340A46F1FD"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ktools:owl:2.1.11:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "33155A72-9F11-41E4-B494-8FAFFC6042E0"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}