Description
Multiple buffer overflows in Spamdyke before 4.3.0 might allow remote attackers to execute arbitrary code via vectors related to "serious errors in the usage of snprintf()/vsnprintf()" in which the return values may be larger than the size of the buffer.
References
- 47548 third-party-advisory
- [oss-security] 20120123 Re: CVE request: spamdyke buffer overflow vulnerability mailing-list
- 51440 vdb-entry
- 78351 vdb-entry
- [spamdyke-release] 20120115 New version: spamdyke 4.3.0 mailing-list
- 48257 third-party-advisory
- http://www.spamdyke.org/documentation/Changelog.txt
- GLSA-201203-01 vendor-advisory