Description

Astaro has issued an update for libspf2. This fixes a vulnerability, which can be exploited by malicious people to potentially compromise an application using the library.

The vulnerability is cause due to a boundary error within the "SPF_dns_resolv_lookup()" function in Spf_dns_resolv.c when processing DNS responses. This can be exploited to cause a heap-based buffer overflow via a specially crafted DNS TXT record.

Successful exploitation may allow execution of arbitrary code.

Solution
Apply Up2Date package 7.305
Further details available in Customer Area

Original Advisory
http://up2date.astaro.com/2008/11/up2date_7305_released.html

Deep Links
Links available in Customer Area