CVE-2007-3791

Published: Jul 15, 2007Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Buffer overflow in the w_read function in sockets.c in Cami Sardinha and Nigel Kukard policyd before 1.81 for Postfix allows remote attackers to cause a denial of service and possibly execute arbitrary code via long SMTP commands. NOTE: some of these details are obtained from third party information.

Affected (11)

Products: Policyd: Policyd

1 product

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Policyd Policyd	Version 1.70
Policyd Policyd	Version 1.71
Policyd Policyd	Version 1.72
Policyd Policyd	Version 1.73
Policyd Policyd	Version 1.74
Policyd Policyd	Version 1.75
Policyd Policyd	Version 1.76
Policyd Policyd	Version 1.77
Policyd Policyd	Version 1.78
Policyd Policyd	Version 1.79
Policyd Policyd	Version 1.80

References (18)

http://osvdb.org/38091

Source: cve@mitre.org

http://secunia.com/advisories/26021

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/26649

Source: cve@mitre.org

http://sourceforge.net/project/shownotes.php?release_id=522366

Source: cve@mitre.org

http://svn.linuxrulz.org/WebSVN/diff.php?repname=Policyd&path=%2Ftrunk%2Fsockets.c&rev=4&sc=0

Source: cve@mitre.org

http://svn.linuxrulz.org/WebSVN/log.php?repname=Policyd&path=%2Fbranches%2Fv1.8x%2Fsockets.c&rev=0&sc=0&isdir=0

Source: cve@mitre.org

http://www.debian.org/security/2007/dsa-1361

Source: cve@mitre.org

http://www.securityfocus.com/bid/24899

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/35394

Source: cve@mitre.org

http://osvdb.org/38091

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/26021

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/26649

Source: af854a3a-2127-422b-91ae-364da2661108

http://sourceforge.net/project/shownotes.php?release_id=522366

Source: af854a3a-2127-422b-91ae-364da2661108

http://svn.linuxrulz.org/WebSVN/diff.php?repname=Policyd&path=%2Ftrunk%2Fsockets.c&rev=4&sc=0

Source: af854a3a-2127-422b-91ae-364da2661108

http://svn.linuxrulz.org/WebSVN/log.php?repname=Policyd&path=%2Fbranches%2Fv1.8x%2Fsockets.c&rev=0&sc=0&isdir=0

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2007/dsa-1361

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/24899

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/35394

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.