147 matches found
FreeBSD Ports: libspf2
The remote host is missing an update to the system as announced in the referenced advisory. VID 2ddbfd29-a455-11dd-a55e-00163e000016 OpenVAS Vulnerability Test $ Description: Auto generated from VID 2ddbfd29-a455-11dd-a55e-00163e000016 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
Debian: Security Advisory (DSA-1659-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Gentoo Security Advisory GLSA 200810-03 (libspf2)
The remote host is missing updates announced in advisory GLSA 200810-03. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
FreeBSD Ports: libspf2
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Debian Security Advisory DSA 1659-1 (libspf2)
The remote host is missing an update to libspf2 announced via advisory DSA 1659-1. OpenVAS Vulnerability Test $Id: deb16591.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1659-1 libspf2 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
GLSA-200810-03 : libspf2: DNS response buffer overflow
The remote host is affected by the vulnerability described in GLSA-200810-03 libspf2: DNS response buffer overflow libspf2 uses a fixed-length buffer to receive DNS responses and does not properly check the length of TXT records, leading to buffer overflows. Impact : A remote attacker could store...
libspf2: DNS response buffer overflow
Background libspf2 is a library that implements the Sender Policy Framework, allowing mail transfer agents to make sure that an email is authorized by the domain name that it is coming from. Currently, only the exim MTA uses libspf2 in Gentoo. Description libspf2 uses a fixed-length buffer to...
libspf2 DNS TXT record parsing buffer overflow
Overview libspf2 contains a buffer overflow vulnerability in code that parses DNS TXT records. Description libspf2 is a widely-deployed implementation of the Sender Policy Framework. According to RFC 4408: An SPF record is a DNS Resource Record RR that declares which hosts are, and are not,...
FreeBSD : libspf2 -- Buffer overflow (2ddbfd29-a455-11dd-a55e-00163e000016)
CVE reports : Heap-based buffer overflow in the SPFdnsresolvlookup function in Spfdnsresolv.c in libspf2 before 1.2.8 allows remote attackers to execute arbitrary code via a long DNS TXT record with a modified length field. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text...
libspf2 DNS TXT记录处理堆溢出漏洞
BUGTRAQ ID: 31881 CVECAN ID: CVE-2008-2469 libspf2是用于实现Sender Policy Framework的库，允许邮件系统检查SPF记录并确认邮件已经过域名授权。 libspf2库的Spfdnsresolv.c文件中的SPFdnsresolvlookup函数存在堆溢出漏洞，如果用户解析了带有特制长度字段的超长DNS TXT记录的话，就可能触发这个溢出，导致执行任意代码。 DNS...
Debian DSA-1659-1 : libspf2 - buffer overflow
Dan Kaminsky discovered that libspf2, an implementation of the Sender Policy Framework SPF used by mail servers for mail filtering, handles malformed TXT records incorrectly, leading to a buffer overflow condition CVE-2008-2469 . Note that the SPF configuration template in Debian's Exim...
LibSPF2 < 1.2.8 DNS TXT Record Parsing Bug Heap Overflow PoC
No description provided by source. Advisory: DNS TXT Record Parsing Bug in LibSPF2 Author: Dan Kaminsky, Director of Penetration Testing, IOActive Inc, [email protected] PGP Key In Appendix Abstract: A relatively common bug parsing TXT records delivered over DNS, dating at least back to...
CVE-2008-2469
Heap-based buffer overflow in the SPFdnsresolvlookup function in Spfdnsresolv.c in libspf2 before 1.2.8 allows remote attackers to execute arbitrary code via a long DNS TXT record with a modified length field...
CVE-2008-2469
Heap-based buffer overflow in the SPFdnsresolvlookup function in Spfdnsresolv.c in libspf2 before 1.2.8 allows remote attackers to execute arbitrary code via a long DNS TXT record with a modified length field...
CVE-2008-2469
Heap-based buffer overflow in the SPFdnsresolvlookup function in Spfdnsresolv.c in libspf2 before 1.2.8 allows remote attackers to execute arbitrary code via a long DNS TXT record with a modified length field...
CVE-2008-2469
CVE-2008-2469: A heap-based buffer overflow in libspf2's DNS TXT record parsing (SPF DNS resolver) can be triggered by overly long TXT records, allowing remote code execution. Multiple advisories confirm the flaw resides in libspf2 prior to 1.2.8 and describe the impact as remote arbitrary code e...
[SECURITY] [DSA 1659-1] New libspf2 packages fix potential remote code execution
------------------------------------------------------------------------ Debian Security Advisory DSA-1659-1 [email protected] http://www.debian.org/security/ Florian Weimer October 23, 2008 http://www.debian.org/security/faq -...
CVE-2008-2469: Improper Restriction of Operations within the Bounds of a Memory Buffer
Heap-based buffer overflow in the SPFdnsresolvlookup function in Spfdnsresolv.c in libspf2 before 1.2.8 allows remote attackers to execute arbitrary code via a long DNS TXT record with a modified length field...
libspf2-parsing.txt
Advisory: DNS TXT Record Parsing Bug in LibSPF2 Author: Dan Kaminsky, Director of Penetration Testing, IOActive Inc, [email protected] PGP Key In Appendix Abstract: A relatively common bug parsing TXT records delivered over DNS, dating at least back to 2002 in Sendmail 8.2.0 and almost...