Cloudanix VulnDB

CVE-2007-2362

None

CVSS

—

EPSS

16.1%

Published

Apr 30, 2007

CISA due date

—

The record

Multiple buffer overflows in MyDNS 1.1.0 allow remote attackers to (1) cause a denial of service (daemon crash) and possibly execute arbitrary code via a certain update, which triggers a heap-based buffer overflow in update.c; and (2) cause a denial of service (daemon crash) via unspecified vectors that trigger an off-by-one stack-based buffer overflow in update.c.

Affected packages

Ecosystem Package Introduced Fixed
Debian:4.0 mydns 0 1:1.1.0-7etch1
Debian:5.0 mydns 0 1:1.1.0-7.1lenny1