DTSA-36-1 mydns - multiple buffer overflows

Bulletin has no description...

MyDNS buffer overflow

Heap buffer overflow on dynamic DNS update request parsing...

[Full-disclosure] mydns-1.1.0 remote heap overflow

The attached PoC causes a remote heap smash in mydns 1.1.0, the bug is found within the dynamic update code update.c. Exploitation requires update privs which tends not to matter too much if you know an IP address with privileges to do so, also allow-update = yes must be set in /etc/mydns.conf. T...