Debian DSA-1361-1 : postfix-policyd - buffer overflow

It was discovered that postfix-policyd, an anti-spam plugin for postfix, didn't correctly test lengths of incoming SMTP commands potentially allowing the remote execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

[SECURITY] [DSA 1361-1] New postfix-policyd packages fix arbitrary code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1361 [email protected] http://www.debian.org/security/ Steve Kemp August 29th, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1361-1] New postfix-policyd packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1361 [email protected] http://www.debian.org/security/ Steve Kemp August 29th, 2007 http://www.debian.org/security/faq - ------------------------------------------------------------------------...

CVE-2007-3791

CVE-2007-3791 affects postfix-policyd (the anti-spam policy daemon for Postfix). The connected sources confirm a buffer overflow in the w_read function in sockets.c, allowing remote attackers to trigger a denial of service and potentially execute arbitrary code via long SMTP commands. The issue i...