NVD

Id
2276  
Name
CVE-2008-2357  
Description
Stack-based buffer overflow in the split_redraw function in split.c in mtr before 0.73, when invoked with the -p (aka --split) option, allows remote attackers to execute arbitrary code via a crafted DNS PTR record. NOTE: it could be argued that this is a vulnerability in the ns_name_ntop function in resolv/ns_name.c in glibc and the proper fix should be in glibc; if so, then this should not be treated as a vulnerability in mtr.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-05-21  
Modified Date
2009-03-13  
Seq
2008-2357  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
14464 2276 CVE-2008-2357 ftp://ftp.bitwizard.nl/mtr/mtr-0.73.diff  View
14465 2276 CVE-2008-2357 SUSE-SR:2008:014  View
14466 2276 CVE-2008-2357 20080519 Mtr - remote and local stack overflow - uncomment situation in libresolv.  View
14467 2276 CVE-2008-2357 GLSA-200806-01  View
14468 2276 CVE-2008-2357 3903  View
14469 2276 CVE-2008-2357 http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0175  View
14470 2276 CVE-2008-2357 DSA-1587  View
14471 2276 CVE-2008-2357 MDVSA-2008:176  View
14472 2276 CVE-2008-2357 [oss-security] 20080521 Re: CVE request: mtr  View
14473 2276 CVE-2008-2357 [oss-security] 20080521 Re: CVE request: mtr  View
14474 2276 CVE-2008-2357 [oss-security] 20080521 Re: CVE request: mtr  View
14475 2276 CVE-2008-2357 20080519 Mtr - remote and local stack overflow - uncomment situation in libresolv.  View
14476 2276 CVE-2008-2357 29290  View
14477 2276 CVE-2008-2357 1020046  View
14478 2276 CVE-2008-2357 mtr-splitredraw-bo(42535)  View
14479 2276 CVE-2008-2357 https://issues.rpath.com/browse/RPL-2558  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
47108 JVNDB-2008-002418 MTR の isplit_redraw 関数におけるバッファオーバーフローの脆弱性 MTR の isplit_redraw 関数には、-p オプションを付けて起動した場合に DNS PTR レコードの処理に不備があるため、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2008-2357 32470 CVE-2008-2357 2276 6.8 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002418.html 2008-05-21 2009-08-25 View