CVE-2007-3791 Buffer overflow in the w_read function in sockets.c in Cami Sardinha and Nigel Kukard policyd before 1.81 for Postfix allows remote attackers to cause a denial of service and possibly execute arbitrar...
HighCVSS 7.5
EPSS 4.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the w_read function in sockets.c in Cami Sardinha and Nigel Kukard policyd before 1.81 for Postfix allows remote attackers to cause a denial of service and possibly execute arbitrary code via long SMTP commands. NOTE: some of these details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| policyd | = 1.70 | No fix listed |
| policyd | = 1.71 | No fix listed |
| policyd | = 1.72 | No fix listed |
| policyd | = 1.73 | No fix listed |
| policyd | = 1.74 | No fix listed |
| policyd | = 1.75 | No fix listed |
| policyd | = 1.76 | No fix listed |
| policyd | = 1.77 | No fix listed |
| policyd | = 1.78 | No fix listed |
| policyd | = 1.79 | No fix listed |
| policyd | = 1.80 | No fix listed |
References
- 38091 vdb-entry
- 26021 third-party-advisory vendor-advisory
- 26649 third-party-advisory
- sourceforge.net
- svn.linuxrulz.org
- svn.linuxrulz.org
- DSA-1361 vendor-advisory
- 24899 vdb-entry
- policyd-wread-bo(35394) vdb-entry