CVE-2007-1866

CVE-2007-1866 involves a stack-based buffer overflow in the dns_decode_reverse_name function of the dproxy-nexgen project (dns_decode.c). The vulnerability allows remote attackers to gain arbitrary code execution by sending a crafted UDP DNS packet to port 53. This is a remote-exploit scenario wi...

CVE-2007-1866

Stack-based buffer overflow in the dnsdecodereversename function in dnsdecode.c in dproxy-nexgen allows remote attackers to execute arbitrary code by sending a crafted packet to port 53/udp, a different issue than CVE-2007-1465...

[Full-disclosure] dproxy-nexgen remote

attached is an exploit for the latest dproxy-nexgen, seems the latest version is just as bad as the previous dproxy-0.5... problem exists because of lack of NULL checking in dnsdecodereversename... -- mu-b [email protected] "Only a few people will follow the proof. Whoever does will spend the...