Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

dyndnsupdate: multiple vulnerabilities

Package(s):

dyndnsupdate

CVE #(s):

Created:

March 21, 2005

Updated:

March 22, 2005

Description:

Toby Dickenson discovered that Xzabite's dyndnsupdate suffers from multiple overflows. A remote attacker, posing as a dyndns.org server, could execute arbitrary code with the rights of the user running dyndnsupdate.

Alerts:

Gentoo

200503-27

2005-03-21

(Log in to post comments)