CVE Feed

    Dashboard / CVE / CVE-2008-2469

    CVE-2008-2469

    Heap-based buffer overflow in the SPF_dns_resolv_lookup function in Spf_dns_resolv.c in libspf2 before 1.2.8 allows remote attackers to execute arbitrary code via a long DNS TXT record with a modified length field.

    Published:Oct 23, 2008
    Last Modified:Apr 23, 2026
    EPS:Oct 23, 2008
    EPSS Score:0.38959
    CVSS Score:10

    Affected Products

    Vendor
    Libspf
    Product
    Libspf2

    Exploits

    http://www.securityfocus.com/bid/31881http://www.securityfocus.com/bid/31881https://www.exploit-db.com/exploits/6805

    References

    http://bugs.gentoo.org/show_bug.cgi?format=multiple&id=242254
    http://secunia.com/advisories/32396
    http://secunia.com/advisories/32450
    http://secunia.com/advisories/32496
    http://secunia.com/advisories/32720
    http://security.gentoo.org/glsa/glsa-200810-03.xml
    http://securityreason.com/securityalert/4487
    http://up2date.astaro.com/2008/11/up2date_7305_released.html
    http://www.debian.org/security/2008/dsa-1659
    http://www.doxpara.com/?p=1263
    http://www.doxpara.com/?page_id=1256
    http://www.kb.cert.org/vuls/id/183657
    http://www.securityfocus.com/bid/31881
    http://www.vupen.com/english/advisories/2008/2896
    https://answers.launchpad.net/ubuntu/gutsy/+source/libspf2/1.2.5.dfsg-4ubuntu0.7.10.1
    https://bugs.launchpad.net/ubuntu/feisty/+source/libspf2/+bug/271025
    https://exchange.xforce.ibmcloud.com/vulnerabilities/46055
    https://www.exploit-db.com/exploits/6805
    http://bugs.gentoo.org/show_bug.cgi?format=multiple&id=242254
    http://secunia.com/advisories/32396
    http://secunia.com/advisories/32450
    http://secunia.com/advisories/32496
    http://secunia.com/advisories/32720
    http://security.gentoo.org/glsa/glsa-200810-03.xml
    http://securityreason.com/securityalert/4487
    http://up2date.astaro.com/2008/11/up2date_7305_released.html
    http://www.debian.org/security/2008/dsa-1659
    http://www.doxpara.com/?p=1263
    http://www.doxpara.com/?page_id=1256
    http://www.kb.cert.org/vuls/id/183657
    http://www.securityfocus.com/bid/31881
    http://www.vupen.com/english/advisories/2008/2896
    https://answers.launchpad.net/ubuntu/gutsy/+source/libspf2/1.2.5.dfsg-4ubuntu0.7.10.1
    https://bugs.launchpad.net/ubuntu/feisty/+source/libspf2/+bug/271025
    https://exchange.xforce.ibmcloud.com/vulnerabilities/46055
    https://www.exploit-db.com/exploits/6805

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High