PT-2004-3321 · Enderunix · Spamguard

Publicado 2004-12-31 · Atualizado 2017-07-11 · CVE-2004-2429

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: EnderUNIX spamGuard versions prior to 1.7-BETA

Description: The issue is related to multiple stack-based and heap-based buffer overflows that allow remote attackers to execute arbitrary code. The overflows occur in various functions, including (1) qmail parseline and (2) sendmail parseline in parser.c, (3) loadconfig and (4) removespaces in loadconfig.c. There are also possibly unspecified functions in functions.c that are affected.

Recommendations: For versions prior to 1.7-BETA, update to version 1.7-BETA or later to resolve the issue. As a temporary workaround, consider restricting access to the affected functions until a patch is available.

Correção

Identificadores relacionados

CVE-2004-2429

Produtos afetados

Spamguard

Referências · 10

• https://nvd.nist.gov/vuln/detail/CVE-2004-2429 · Nota de Segurança
• http://osvdb.org/6521 · Correção
• http://securityfocus.com/bid/10434 · Correção
• http://secunia.com/advisories/11747 · Correção
• http://enderunix.org/spamguard/spamguard-1.7/CHANGELOG · Nota
• http://securitytracker.com/id?1010342 · Aviso do Fabricante
• http://archives.neohapsis.com/archives/bugtraq/2004-05/0298.html · Aviso do Fabricante
• http://osvdb.org/6523 · Correção
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16278 · Nota
• http://osvdb.org/6522 · Correção