CVE

Id
27148  
CVE No.
CVE-2007-3791  
Status
Candidate  
Description
Buffer overflow in the w_read function in sockets.c in Cami Sardinha and Nigel Kukard policyd before 1.81 for Postfix allows remote attackers to cause a denial of service and possibly execute arbitrary code via long SMTP commands. NOTE: some of these details are obtained from third party information.  
Phase
Assigned (20070715)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
277947 27148 CVE-2007-3791 CONFIRM:http://sourceforge.net/project/shownotes.php?release_id=522366  View
277948 27148 CVE-2007-3791 CONFIRM:http://svn.linuxrulz.org/WebSVN/diff.php?repname=Policyd&path=%2Ftrunk%2Fsockets.c&rev=4&sc=0  View
277949 27148 CVE-2007-3791 CONFIRM:http://svn.linuxrulz.org/WebSVN/log.php?repname=Policyd&path=%2Fbranches%2Fv1.8x%2Fsockets.c&rev=0&sc=0&isdir=0  View
277950 27148 CVE-2007-3791 DEBIAN:DSA-1361  View
277951 27148 CVE-2007-3791 URL:http://www.debian.org/security/2007/dsa-1361  View
277952 27148 CVE-2007-3791 BID:24899  View
277953 27148 CVE-2007-3791 URL:http://www.securityfocus.com/bid/24899  View
277954 27148 CVE-2007-3791 OSVDB:38091  View
277955 27148 CVE-2007-3791 URL:http://osvdb.org/38091  View
277956 27148 CVE-2007-3791 SECUNIA:26021  View
277957 27148 CVE-2007-3791 URL:http://secunia.com/advisories/26021  View
277958 27148 CVE-2007-3791 SECUNIA:26649  View
277959 27148 CVE-2007-3791 URL:http://secunia.com/advisories/26649  View
277960 27148 CVE-2007-3791 XF:policyd-wread-bo(35394)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
52036 JVNDB-2007-000699 JP1/NETM/DM ManagerにおけるSQLインジェクションの脆弱性 Windows版 JP1/NETM/DM Managerにおいて，SQLインジェクションの脆弱性が存在します。JP1/NETM/DMのデータベースにリレーショナルデータベースを使用した環境で，不正なリクエストメッセージを受信した場合，任意のSQL文が実行されたり，データベースが不正な状態に陥る可能性があります。 CVE-2007-3793 27148 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000699.html  View