CVE-2007-2362
NoneCVSS
—
EPSS
16.1%
Published
Apr 30, 2007
CISA due date
—
The record
Multiple buffer overflows in MyDNS 1.1.0 allow remote attackers to (1) cause a denial of service (daemon crash) and possibly execute arbitrary code via a certain update, which triggers a heap-based buffer overflow in update.c; and (2) cause a denial of service (daemon crash) via unspecified vectors that trigger an off-by-one stack-based buffer overflow in update.c.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:4.0 | mydns | 0 | 1:1.1.0-7etch1 |
| Debian:5.0 | mydns | 0 | 1:1.1.0-7.1lenny1 |