NetSight
IP …
critical10.0Public exploit code

CVE-2008-2469

Heap-based buffer overflow in the SPF_dns_resolv_lookup function in Spf_dns_resolv.c in libspf2 before 1.2.8 allows remote attackers to execute arbitrary code …

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Heap-based buffer overflow in the SPF_dns_resolv_lookup function in Spf_dns_resolv.c in libspf2 before 1.2.8 allows remote attackers to execute arbitrary code via a long DNS TXT record with a modified length field.

Affected products

VendorProductAffected versions
LibspfLibspf2
through 1.2.7
Versions 1.0.2, 1.0.3, 1.0.4, 1.2.1, 1.2.3

Weakness classification

CWE-119

References