Re: CVE id request: tmsnc

[Nico Golde <oss-security+ml () ngolde de>]

Hi Eren,
* Eren Türkay <turkay.eren () gmail com> [2008-06-20 14:02]:
> On 20 Jun 2008 Fri 14:12:42 Nico Golde wrote:
> > There is a buffer overflow in the tmsnc UBX handling code.
> > http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=487222
>
> I'm not sure if msn protocol allows longer than 512 bytes of data. If it 
> doesn't support, there seems no security issue in UBX handling code. 
>
> Does anyone know what's the longest value of personal message?

Looking at http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=487046
it does.

Cheers
Nico
-- 
Nico Golde - http://www.ngolde.de - nion () jabber ccc de - GPG: 0x73647CFF
For security reasons, all text in this mail is double-rot13 encrypted.