Vulnerabilities > CVE-2004-2429 - Buffer Overflow vulnerability in Spamguard

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
enderunix-software
NVD
Published: 2004-12-31
Updated: 2017-07-11

Summary

Multiple stack-based and heap-based buffer overflows in EnderUNIX spamGuard before 1.7-BETA allow remote attackers to execute arbitrary code via the (1) qmail_parseline and (2) sendmail_parseline functions in parser.c, (3) loadconfig and (4) removespaces functions in loadconfig.c, and possibly (5) unspecified functions in functions.c.

Vulnerable Configurations

Part Description Count
Application
Enderunix_Software
1

References