[Bug 485973] [NEW] php5-cgi: IMAP toolkit crash

[Launchpad Bug Tracker]

You have been subscribed to a public bug:

While using export function in my horde webmail  (in order to get a
maildir downloaded as mbox file) i get an internal server error and on
the php error log i get this:

php5-cgi: IMAP toolkit crash: rfc822.c legacy routine buffer overflow


This bug was released as fixed on USN-628-1 (http://www.ubuntu.com/usn/usn-628-1) as fix for  CVE-2008-2829, but as far as i can see, the problem still exists

Here are the os details:


root at posta1:~# lsb_release -rd
Description:    Ubuntu 8.04.3 LTS
Release:        8.04
root at posta1:~# dpkg -l php5*
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Installed/Config-f/Unpacked/Failed-cfg/Half-inst/t-aWait/T-pend
|/ Err?=(none)/Hold/Reinst-required/X=both-problems (Status,Err: uppercase=bad)
||/ Nome                                 Versione                             Descrizione
+++-====================================-====================================-========================================================================================
ii  php5                                 5.2.4-2ubuntu5.7                     server-side, HTML-embedded scripting language (meta-package)
ii  php5-cgi                             5.2.4-2ubuntu5.7                     server-side, HTML-embedded scripting language (CGI binary)
ii  php5-cli                             5.2.4-2ubuntu5.7                     command-line interpreter for the php5 scripting language
ii  php5-common                          5.2.4-2ubuntu5.7                     Common files for packages built from the php5 source
ii  php5-curl                            5.2.4-2ubuntu5.7                     CURL module for php5
ii  php5-gd                              5.2.4-2ubuntu5.7                     GD module for php5
ii  php5-imap                            5.2.3-0ubuntu3                       IMAP module for php5
un  php5-json                            <non definita>                       (descrizione non disponibile)
ii  php5-ldap                            5.2.4-2ubuntu5.7                     LDAP module for php5
ii  php5-mcrypt                          5.2.3-0ubuntu1                       MCrypt module for php5
ii  php5-mhash                           5.2.4-2ubuntu5.7                     MHASH module for php5
ii  php5-mysql                           5.2.4-2ubuntu5.7                     MySQL module for php5
un  php5-mysqli                          <non definita>                       (descrizione non disponibile)
ii  php5-suhosin                         0.9.22-1                             advanced protection module for php5
root at posta1:~# apt-cache policy php5-cgi
php5-cgi:
  Installato: 5.2.4-2ubuntu5.7
  Candidato: 5.2.4-2ubuntu5.7
  Tabella versione:
 *** 5.2.4-2ubuntu5.7 0
        500 http://it.archive.ubuntu.com hardy-updates/main Packages
        500 http://security.ubuntu.com hardy-security/main Packages
        100 /var/lib/dpkg/status
     5.2.4-2ubuntu5 0
        500 http://it.archive.ubuntu.com hardy/main Packages

** Affects: php5 (Ubuntu)
     Importance: High
         Status: Confirmed

-- 
php5-cgi: IMAP toolkit crash
https://bugs.edge.launchpad.net/bugs/485973
You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to php5 in ubuntu.