critical10.0Public exploit code
CVE-2007-1465
Stack-based buffer overflow in dproxy.c for dproxy 0.1 through 0.5 allows remote attackers to execute arbitrary code via a long DNS query packet to UDP port 53.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- dproxy 0.5 - Remote Buffer Overflow (Metasploit)2007-03-23 · remote · linux · Verified
Impact
Stack-based buffer overflow in dproxy.c for dproxy 0.1 through 0.5 allows remote attackers to execute arbitrary code via a long DNS query packet to UDP port 53.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dproxy | Dproxy | Versions 0.1, 0.2, 0.3, 0.4, 0.5 |
References
- NVD record
- CVE.org record
- http://osvdb.org/34449
- http://seclists.org/fulldisclosure/2007/Mar/0409.html
- http://secunia.com/advisories/24623
- http://www.securityfocus.com/bid/23112
- http://www.vupen.com/english/advisories/2007/1091
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33171
- https://www.cynops.de/advisories/CVE-2007-1465.txt
- http://osvdb.org/34449
- http://seclists.org/fulldisclosure/2007/Mar/0409.html
- http://secunia.com/advisories/24623
- http://www.securityfocus.com/bid/23112
- http://www.vupen.com/english/advisories/2007/1091
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33171
- https://www.cynops.de/advisories/CVE-2007-1465.txt