CVEvulnerability
CVE-2008-2357
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-05-21
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-119
Description
Stack-based buffer overflow in the split_redraw function in split.c in mtr before 0.73, when invoked with the -p (aka --split) option, allows remote attackers to execute arbitrary code via a crafted DNS PTR record. NOTE: it could be argued that this is a vulnerability in the ns_name_ntop function in resolv/ns_name.c in glibc and the proper fix should be in glibc; if so, then this should not be treated as a vulnerability in mtr.
Affected configurations
• matt kimball and roger wolff mtr (<= 0.72)
• matt kimball and roger wolff mtr 0.21
• matt kimball and roger wolff mtr 0.22
• matt kimball and roger wolff mtr 0.23
• matt kimball and roger wolff mtr 0.24
• matt kimball and roger wolff mtr 0.25
• matt kimball and roger wolff mtr 0.26
• matt kimball and roger wolff mtr 0.27
• matt kimball and roger wolff mtr 0.28
• matt kimball and roger wolff mtr 0.29
• matt kimball and roger wolff mtr 0.30
• matt kimball and roger wolff mtr 0.31
• matt kimball and roger wolff mtr 0.32
• matt kimball and roger wolff mtr 0.33
• matt kimball and roger wolff mtr 0.34
• matt kimball and roger wolff mtr 0.35
• matt kimball and roger wolff mtr 0.36
• matt kimball and roger wolff mtr 0.37
• matt kimball and roger wolff mtr 0.38
• matt kimball and roger wolff mtr 0.39
• matt kimball and roger wolff mtr 0.40
• matt kimball and roger wolff mtr 0.41
• matt kimball and roger wolff mtr 0.42
• matt kimball and roger wolff mtr 0.43
• matt kimball and roger wolff mtr 0.44
• matt kimball and roger wolff mtr 0.45
• matt kimball and roger wolff mtr 0.46
• matt kimball and roger wolff mtr 0.47
• matt kimball and roger wolff mtr 0.48
• matt kimball and roger wolff mtr 0.49
• matt kimball and roger wolff mtr 0.50
• matt kimball and roger wolff mtr 0.51
• matt kimball and roger wolff mtr 0.52
• matt kimball and roger wolff mtr 0.53
• matt kimball and roger wolff mtr 0.54
• matt kimball and roger wolff mtr 0.55
• matt kimball and roger wolff mtr 0.56
• matt kimball and roger wolff mtr 0.57
• matt kimball and roger wolff mtr 0.58
• matt kimball and roger wolff mtr 0.59
• matt kimball and roger wolff mtr 0.60
• matt kimball and roger wolff mtr 0.61
• matt kimball and roger wolff mtr 0.62
• matt kimball and roger wolff mtr 0.63
• matt kimball and roger wolff mtr 0.64
• matt kimball and roger wolff mtr 0.65
• matt kimball and roger wolff mtr 0.66
• matt kimball and roger wolff mtr 0.67
• matt kimball and roger wolff mtr 0.68
• matt kimball and roger wolff mtr 0.69
• matt kimball and roger wolff mtr 0.70
• matt kimball and roger wolff mtr 0.71
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- ftp://ftp.bitwizard.nl/mtr/mtr-0.73.diff ftp.bitwizard.nl
- http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html lists.opensuse.org
- http://seclists.org/fulldisclosure/2008/May/0488.html Exploit
- http://secunia.com/advisories/30312 Vendor Advisory
- http://secunia.com/advisories/30340 secunia.com
- http://secunia.com/advisories/30359 secunia.com
- http://secunia.com/advisories/30522 secunia.com
- http://secunia.com/advisories/30967 secunia.com
- http://security.gentoo.org/glsa/glsa-200806-01.xml security.gentoo.org
- http://securityreason.com/securityalert/3903 securityreason.com
- http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0175 wiki.rpath.com
- http://www.debian.org/security/2008/dsa-1587 www.debian.org
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:176 www.mandriva.com
- http://www.openwall.com/lists/oss-security/2008/05/21/1 www.openwall.com
- http://www.openwall.com/lists/oss-security/2008/05/21/3 www.openwall.com
- http://www.openwall.com/lists/oss-security/2008/05/21/4 www.openwall.com
- http://www.securityfocus.com/archive/1/492260/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/29290 www.securityfocus.com
- http://www.securitytracker.com/id?1020046 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42535 exchange.xforce.ibmcloud.com
- https://issues.rpath.com/browse/RPL-2558 issues.rpath.com
- ftp://ftp.bitwizard.nl/mtr/mtr-0.73.diff ftp.bitwizard.nl
- http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html lists.opensuse.org
- http://seclists.org/fulldisclosure/2008/May/0488.html Exploit
- http://secunia.com/advisories/30312 Vendor Advisory
- http://secunia.com/advisories/30340 secunia.com
- http://secunia.com/advisories/30359 secunia.com
- http://secunia.com/advisories/30522 secunia.com
- http://secunia.com/advisories/30967 secunia.com
- http://security.gentoo.org/glsa/glsa-200806-01.xml security.gentoo.org
- http://securityreason.com/securityalert/3903 securityreason.com
- http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0175 wiki.rpath.com
- http://www.debian.org/security/2008/dsa-1587 www.debian.org
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:176 www.mandriva.com
- http://www.openwall.com/lists/oss-security/2008/05/21/1 www.openwall.com
- http://www.openwall.com/lists/oss-security/2008/05/21/3 www.openwall.com
- http://www.openwall.com/lists/oss-security/2008/05/21/4 www.openwall.com
- http://www.securityfocus.com/archive/1/492260/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/29290 www.securityfocus.com
- http://www.securitytracker.com/id?1020046 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42535 exchange.xforce.ibmcloud.com
- https://issues.rpath.com/browse/RPL-2558 issues.rpath.com