spamdyke contains an overflow condition in multiple functions. The issue is due to boundary errors related to the incorrect use of the snprintf() and vsnprintf() functions. With an overly large request, a remote attacker can cause a buffer overflow, resulting in a denial of service or potentially execution of arbitrary code.

It has been reported that this issue has been fixed. Upgrade to version 4.3.0, or higher, to address this vulnerability.

• CVE ID: 2012-0802 (see also: NVD)
• Secunia Advisory ID: 47548 48257
• Bugtraq ID: 51440
• Mail List Post: http://seclists.org/oss-sec/2012/q1/227
• Vendor Specific News/Changelog Entry: http://security.gentoo.org/glsa/glsa-201203-01.xml
  http://www.spamdyke.org/documentation/Changelog.txt
• Vendor Specific Advisory URL: http://www.mail-archive.com/[email protected]/msg00014.html
• Other Advisory URL: http://www.openwall.com/lists/oss-security/2012/01/23/5
• Vendor URL: http://www.spamdyke.org/

• Not Available