CVEvulnerability

CVE-2008-2357

6.8 MEDIUM Published 2008-05-21 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2008-05-21
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-119

Description

Stack-based buffer overflow in the split_redraw function in split.c in mtr before 0.73, when invoked with the -p (aka --split) option, allows remote attackers to execute arbitrary code via a crafted DNS PTR record. NOTE: it could be argued that this is a vulnerability in the ns_name_ntop function in resolv/ns_name.c in glibc and the proper fix should be in glibc; if so, then this should not be treated as a vulnerability in mtr.

Affected configurations

• matt kimball and roger wolff mtr (<= 0.72) • matt kimball and roger wolff mtr 0.21 • matt kimball and roger wolff mtr 0.22 • matt kimball and roger wolff mtr 0.23 • matt kimball and roger wolff mtr 0.24 • matt kimball and roger wolff mtr 0.25 • matt kimball and roger wolff mtr 0.26 • matt kimball and roger wolff mtr 0.27 • matt kimball and roger wolff mtr 0.28 • matt kimball and roger wolff mtr 0.29 • matt kimball and roger wolff mtr 0.30 • matt kimball and roger wolff mtr 0.31 • matt kimball and roger wolff mtr 0.32 • matt kimball and roger wolff mtr 0.33 • matt kimball and roger wolff mtr 0.34 • matt kimball and roger wolff mtr 0.35 • matt kimball and roger wolff mtr 0.36 • matt kimball and roger wolff mtr 0.37 • matt kimball and roger wolff mtr 0.38 • matt kimball and roger wolff mtr 0.39 • matt kimball and roger wolff mtr 0.40 • matt kimball and roger wolff mtr 0.41 • matt kimball and roger wolff mtr 0.42 • matt kimball and roger wolff mtr 0.43 • matt kimball and roger wolff mtr 0.44 • matt kimball and roger wolff mtr 0.45 • matt kimball and roger wolff mtr 0.46 • matt kimball and roger wolff mtr 0.47 • matt kimball and roger wolff mtr 0.48 • matt kimball and roger wolff mtr 0.49 • matt kimball and roger wolff mtr 0.50 • matt kimball and roger wolff mtr 0.51 • matt kimball and roger wolff mtr 0.52 • matt kimball and roger wolff mtr 0.53 • matt kimball and roger wolff mtr 0.54 • matt kimball and roger wolff mtr 0.55 • matt kimball and roger wolff mtr 0.56 • matt kimball and roger wolff mtr 0.57 • matt kimball and roger wolff mtr 0.58 • matt kimball and roger wolff mtr 0.59 • matt kimball and roger wolff mtr 0.60 • matt kimball and roger wolff mtr 0.61 • matt kimball and roger wolff mtr 0.62 • matt kimball and roger wolff mtr 0.63 • matt kimball and roger wolff mtr 0.64 • matt kimball and roger wolff mtr 0.65 • matt kimball and roger wolff mtr 0.66 • matt kimball and roger wolff mtr 0.67 • matt kimball and roger wolff mtr 0.68 • matt kimball and roger wolff mtr 0.69 • matt kimball and roger wolff mtr 0.70 • matt kimball and roger wolff mtr 0.71

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References