Description
Multiple stack-based and heap-based buffer overflows in EnderUNIX spamGuard before 1.7-BETA allow remote attackers to execute arbitrary code via the (1) qmail_parseline and (2) sendmail_parseline functions in parser.c, (3) loadconfig and (4) removespaces functions in loadconfig.c, and possibly (5) unspecified functions in functions.c.
References
- spamguard-multiple-bo(16278) vdb-entry
- 6521 vdb-entry
- 11747 third-party-advisory
- 10434 vdb-entry
- 1010342 vdb-entry
- 20040528 EnderUNIX Security Anouncement (Isoqlog and Spamguard) mailing-list
- 6522 vdb-entry
- 6523 vdb-entry
- http://www.enderunix.org/spamguard/spamguard-1.7/CHANGELOG