Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2008-2357

Stack-based buffer overflow in the split_redraw function in split.c in mtr before 0.73, when invoked with the -p (aka --split) option, allows remote attackers to execute arbitrary code via a crafted DNS PTR record. NOTE: it could be argued that this is a vulnerability in the ns_name_ntop function in resolv/ns_name.c in glibc and the proper fix should be in glibc; if so, then this should not be treated as a vulnerability in mtr.

Published

2008-05-21T13:24:00.000

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 6.8 (MEDIUM)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

8.6

Impact Score

6.4

Weaknesses
  • Type: Primary
    CWE-119
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application matt_kimball_and_roger_wolff mtr ≤ 0.72 Yes
Application matt_kimball_and_roger_wolff mtr 0.21 Yes
Application matt_kimball_and_roger_wolff mtr 0.22 Yes
Application matt_kimball_and_roger_wolff mtr 0.23 Yes
Application matt_kimball_and_roger_wolff mtr 0.24 Yes
Application matt_kimball_and_roger_wolff mtr 0.25 Yes
Application matt_kimball_and_roger_wolff mtr 0.26 Yes
Application matt_kimball_and_roger_wolff mtr 0.27 Yes
Application matt_kimball_and_roger_wolff mtr 0.28 Yes
Application matt_kimball_and_roger_wolff mtr 0.29 Yes
Application matt_kimball_and_roger_wolff mtr 0.30 Yes
Application matt_kimball_and_roger_wolff mtr 0.31 Yes
Application matt_kimball_and_roger_wolff mtr 0.32 Yes
Application matt_kimball_and_roger_wolff mtr 0.33 Yes
Application matt_kimball_and_roger_wolff mtr 0.34 Yes
Application matt_kimball_and_roger_wolff mtr 0.35 Yes
Application matt_kimball_and_roger_wolff mtr 0.36 Yes
Application matt_kimball_and_roger_wolff mtr 0.37 Yes
Application matt_kimball_and_roger_wolff mtr 0.38 Yes
Application matt_kimball_and_roger_wolff mtr 0.39 Yes
Application matt_kimball_and_roger_wolff mtr 0.40 Yes
Application matt_kimball_and_roger_wolff mtr 0.41 Yes
Application matt_kimball_and_roger_wolff mtr 0.42 Yes
Application matt_kimball_and_roger_wolff mtr 0.43 Yes
Application matt_kimball_and_roger_wolff mtr 0.44 Yes
Application matt_kimball_and_roger_wolff mtr 0.45 Yes
Application matt_kimball_and_roger_wolff mtr 0.46 Yes
Application matt_kimball_and_roger_wolff mtr 0.47 Yes
Application matt_kimball_and_roger_wolff mtr 0.48 Yes
Application matt_kimball_and_roger_wolff mtr 0.49 Yes
Application matt_kimball_and_roger_wolff mtr 0.50 Yes
Application matt_kimball_and_roger_wolff mtr 0.51 Yes
Application matt_kimball_and_roger_wolff mtr 0.52 Yes
Application matt_kimball_and_roger_wolff mtr 0.53 Yes
Application matt_kimball_and_roger_wolff mtr 0.54 Yes
Application matt_kimball_and_roger_wolff mtr 0.55 Yes
Application matt_kimball_and_roger_wolff mtr 0.56 Yes
Application matt_kimball_and_roger_wolff mtr 0.57 Yes
Application matt_kimball_and_roger_wolff mtr 0.58 Yes
Application matt_kimball_and_roger_wolff mtr 0.59 Yes
Application matt_kimball_and_roger_wolff mtr 0.60 Yes
Application matt_kimball_and_roger_wolff mtr 0.61 Yes
Application matt_kimball_and_roger_wolff mtr 0.62 Yes
Application matt_kimball_and_roger_wolff mtr 0.63 Yes
Application matt_kimball_and_roger_wolff mtr 0.64 Yes
Application matt_kimball_and_roger_wolff mtr 0.65 Yes
Application matt_kimball_and_roger_wolff mtr 0.66 Yes
Application matt_kimball_and_roger_wolff mtr 0.67 Yes
Application matt_kimball_and_roger_wolff mtr 0.68 Yes
Application matt_kimball_and_roger_wolff mtr 0.69 Yes
Application matt_kimball_and_roger_wolff mtr 0.70 Yes
Application matt_kimball_and_roger_wolff mtr 0.71 Yes
References