CVE Vulnerabilities

CVE-2007-3791

Published: Jul 15, 2007 | Modified: Jul 29, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu
UNTRIAGED

Buffer overflow in the w_read function in sockets.c in Cami Sardinha and Nigel Kukard policyd before 1.81 for Postfix allows remote attackers to cause a denial of service and possibly execute arbitrary code via long SMTP commands. NOTE: some of these details are obtained from third party information.

Affected Software

Name Vendor Start Version End Version
Policyd Policyd 1.70 (including) 1.70 (including)
Policyd Policyd 1.71 (including) 1.71 (including)
Policyd Policyd 1.72 (including) 1.72 (including)
Policyd Policyd 1.73 (including) 1.73 (including)
Policyd Policyd 1.74 (including) 1.74 (including)
Policyd Policyd 1.75 (including) 1.75 (including)
Policyd Policyd 1.76 (including) 1.76 (including)
Policyd Policyd 1.77 (including) 1.77 (including)
Policyd Policyd 1.78 (including) 1.78 (including)
Policyd Policyd 1.79 (including) 1.79 (including)
Policyd Policyd 1.80 (including) 1.80 (including)
Postfix-policyd Ubuntu dapper *
Postfix-policyd Ubuntu devel *
Postfix-policyd Ubuntu edgy *
Postfix-policyd Ubuntu feisty *
Postfix-policyd Ubuntu gutsy *
Postfix-policyd Ubuntu hardy *
Postfix-policyd Ubuntu intrepid *
Postfix-policyd Ubuntu jaunty *
Postfix-policyd Ubuntu karmic *

References