Lucene search

K
ubuntucveUbuntu.comUB:CVE-2007-2362
HistoryApr 30, 2007 - 12:00 a.m.

CVE-2007-2362

2007-04-3000:00:00
ubuntu.com
ubuntu.com
4

9 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.093 Low

EPSS

Percentile

94.7%

Multiple buffer overflows in MyDNS 1.1.0 allow remote attackers to (1)
cause a denial of service (daemon crash) and possibly execute arbitrary
code via a certain update, which triggers a heap-based buffer overflow in
update.c; and (2) cause a denial of service (daemon crash) via unspecified
vectors that trigger an off-by-one stack-based buffer overflow in update.c.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchmydns< 1.1.0+pre-3ubuntu0.1UNKNOWN
ubuntu6.10noarchmydns< 1.1.0-3ubuntu0.1UNKNOWN
ubuntu7.04noarchmydns< 1.1.0-6ubuntu0.1UNKNOWN

9 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.093 Low

EPSS

Percentile

94.7%