CVE-2007-2362 - Vulnerability Details - OpenCVE

Multiple buffer overflows in MyDNS 1.1.0 allow remote attackers to (1) cause a denial of service (daemon crash) and possibly execute arbitrary code via a certain update, which triggers a heap-based buffer overflow in update.c; and (2) cause a denial of service (daemon crash) via unspecified vectors that trigger an off-by-one stack-based buffer overflow in update.c.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication Single

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

This CVE is not in the KEV list.

The EPSS score is 0.27708.

Key SSVC decision points have not yet been added.

Vendors	Products
Don Moore Subscribe	Mydns Subscribe

Configuration 1 [-]

cpe:2.3:a:don_moore:mydns:1.1.0:*:*:*:*:*:*:*

No data.

No data.

Advisories

Source	ID	Title
Debian DSA	DSA-1434-1	New mydns packages fix denial of service

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
http://lists.grok.org.uk/pipermail/full-disclosure/2007-April/054024.html
http://osvdb.org/35438
http://osvdb.org/35439
http://secunia.com/advisories/25007
http://secunia.com/advisories/28086
http://securityreason.com/securityalert/2658
http://www.debian.org/security/2007/dsa-1434
http://www.digit-labs.org/files/exploits/mydns-rr-smash.c
http://www.digit-labs.org/files/patches/mydns-update.c.diff
http://www.securityfocus.com/bid/23694
http://www.vupen.com/english/advisories/2007/1561
https://exchange.xforce.ibmcloud.com/vulnerabilities/33933

History

No history.

Projects

Sign in to view the affected projects.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2007-04-30T22:00:00

Updated: 2024-08-07T13:33:28.645Z

Reserved: 2007-04-30T00:00:00

Link: CVE-2007-2362

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2007-04-30T22:19:00.000

Modified: 2025-04-09T00:30:58.490

Link: CVE-2007-2362

Redhat

No data.

OpenCVE Enrichment

No data.

Weaknesses

NVD-CWE-Other

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2007-04-27T00:00:00", "descriptions": [{"lang": "en", "value": "Multiple buffer overflows in MyDNS 1.1.0 allow remote attackers to (1) cause a denial of service (daemon crash) and possibly execute arbitrary code via a certain update, which triggers a heap-based buffer overflow in update.c; and (2) cause a denial of service (daemon crash) via unspecified vectors that trigger an off-by-one stack-based buffer overflow in update.c."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-07-28T12:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "mydns-update-bo(33933)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33933"}, {"name": "35439", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/35439"}, {"name": "20070427 mydns-1.1.0 remote heap overflow", "tags": ["mailing-list", "x_refsource_FULLDISC"], "url": "http://lists.grok.org.uk/pipermail/full-disclosure/2007-April/054024.html"}, {"name": "2658", "tags": ["third-party-advisory", "x_refsource_SREASON"], "url": "http://securityreason.com/securityalert/2658"}, {"name": "23694", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/23694"}, {"name": "DSA-1434", "tags": ["vendor-advisory", "x_refsource_DEBIAN"], "url": "http://www.debian.org/security/2007/dsa-1434"}, {"name": "25007", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/25007"}, {"name": "ADV-2007-1561", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2007/1561"}, {"tags": ["x_refsource_MISC"], "url": "http://www.digit-labs.org/files/exploits/mydns-rr-smash.c"}, {"name": "35438", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/35438"}, {"name": "28086", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/28086"}, {"tags": ["x_refsource_MISC"], "url": "http://www.digit-labs.org/files/patches/mydns-update.c.diff"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2007-2362", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Multiple buffer overflows in MyDNS 1.1.0 allow remote attackers to (1) cause a denial of service (daemon crash) and possibly execute arbitrary code via a certain update, which triggers a heap-based buffer overflow in update.c; and (2) cause a denial of service (daemon crash) via unspecified vectors that trigger an off-by-one stack-based buffer overflow in update.c."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "mydns-update-bo(33933)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33933"}, {"name": "35439", "refsource": "OSVDB", "url": "http://osvdb.org/35439"}, {"name": "20070427 mydns-1.1.0 remote heap overflow", "refsource": "FULLDISC", "url": "http://lists.grok.org.uk/pipermail/full-disclosure/2007-April/054024.html"}, {"name": "2658", "refsource": "SREASON", "url": "http://securityreason.com/securityalert/2658"}, {"name": "23694", "refsource": "BID", "url": "http://www.securityfocus.com/bid/23694"}, {"name": "DSA-1434", "refsource": "DEBIAN", "url": "http://www.debian.org/security/2007/dsa-1434"}, {"name": "25007", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/25007"}, {"name": "ADV-2007-1561", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2007/1561"}, {"name": "http://www.digit-labs.org/files/exploits/mydns-rr-smash.c", "refsource": "MISC", "url": "http://www.digit-labs.org/files/exploits/mydns-rr-smash.c"}, {"name": "35438", "refsource": "OSVDB", "url": "http://osvdb.org/35438"}, {"name": "28086", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/28086"}, {"name": "http://www.digit-labs.org/files/patches/mydns-update.c.diff", "refsource": "MISC", "url": "http://www.digit-labs.org/files/patches/mydns-update.c.diff"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T13:33:28.645Z"}, "title": "CVE Program Container", "references": [{"name": "mydns-update-bo(33933)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33933"}, {"name": "35439", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/35439"}, {"name": "20070427 mydns-1.1.0 remote heap overflow", "tags": ["mailing-list", "x_refsource_FULLDISC", "x_transferred"], "url": "http://lists.grok.org.uk/pipermail/full-disclosure/2007-April/054024.html"}, {"name": "2658", "tags": ["third-party-advisory", "x_refsource_SREASON", "x_transferred"], "url": "http://securityreason.com/securityalert/2658"}, {"name": "23694", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/23694"}, {"name": "DSA-1434", "tags": ["vendor-advisory", "x_refsource_DEBIAN", "x_transferred"], "url": "http://www.debian.org/security/2007/dsa-1434"}, {"name": "25007", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/25007"}, {"name": "ADV-2007-1561", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2007/1561"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://www.digit-labs.org/files/exploits/mydns-rr-smash.c"}, {"name": "35438", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/35438"}, {"name": "28086", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/28086"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://www.digit-labs.org/files/patches/mydns-update.c.diff"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2007-2362", "datePublished": "2007-04-30T22:00:00", "dateReserved": "2007-04-30T00:00:00", "dateUpdated": "2024-08-07T13:33:28.645Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:don_moore:mydns:1.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "40833162-A29F-4596-8B3B-E09EE19FF68F", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Multiple buffer overflows in MyDNS 1.1.0 allow remote attackers to (1) cause a denial of service (daemon crash) and possibly execute arbitrary code via a certain update, which triggers a heap-based buffer overflow in update.c; and (2) cause a denial of service (daemon crash) via unspecified vectors that trigger an off-by-one stack-based buffer overflow in update.c."}, {"lang": "es", "value": "M\u00faltibles desbordamientos de b\u00fafer en MyDNS 1.1.0 permiten a atacantes remotos (1) provocar una denegaci\u00f3n de servicio (ca\u00edda del demonio) y posiblemente ejecutar c\u00f3digo de su elecci\u00f3n mediante una determinada actualizaci\u00f3n, la cual dispara un desbordamiento de b\u00fafer basado en mont\u00f3n en update.c; y (2) provocar una denegaci\u00f3n de servicio (ca\u00edda del demonio) mediante vectores no especificados que disparan un desbordamiento de b\u00fafer basado en pila por error de superaci\u00f3n de l\u00edmite (off-by-one) en update.c"}], "evaluatorImpact": "Successful exploitation requires update privileges and that \"allow-update\" is set to \"yes\" in mydns.conf.", "id": "CVE-2007-2362", "lastModified": "2025-04-09T00:30:58.490", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "COMPLETE", "baseScore": 9.0, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2007-04-30T22:19:00.000", "references": [{"source": "cve@mitre.org", "url": "http://lists.grok.org.uk/pipermail/full-disclosure/2007-April/054024.html"}, {"source": "cve@mitre.org", "url": "http://osvdb.org/35438"}, {"source": "cve@mitre.org", "url": "http://osvdb.org/35439"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/25007"}, {"source": "cve@mitre.org", "url": "http://secunia.com/advisories/28086"}, {"source": "cve@mitre.org", "url": "http://securityreason.com/securityalert/2658"}, {"source": "cve@mitre.org", "url": "http://www.debian.org/security/2007/dsa-1434"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://www.digit-labs.org/files/exploits/mydns-rr-smash.c"}, {"source": "cve@mitre.org", "url": "http://www.digit-labs.org/files/patches/mydns-update.c.diff"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/23694"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2007/1561"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33933"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://lists.grok.org.uk/pipermail/full-disclosure/2007-April/054024.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://osvdb.org/35438"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://osvdb.org/35439"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/25007"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/28086"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://securityreason.com/securityalert/2658"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.debian.org/security/2007/dsa-1434"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://www.digit-labs.org/files/exploits/mydns-rr-smash.c"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.digit-labs.org/files/patches/mydns-update.c.diff"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/23694"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vupen.com/english/advisories/2007/1561"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33933"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}