CVE-2007-2362
Multiple buffer overflows in MyDNS 1.1.0 allow remote attackers to (1) cause a denial of service ...
Multiple buffer overflows in MyDNS 1.1.0 allow remote attackers to (1) cause a denial of service (daemon crash) and possibly execute arbitrary code via a certain update, which triggers a heap-based buffer overflow in update.c; and (2) cause a denial of service (daemon crash) via unspecified vectors that trigger an off-by-one stack-based buffer overflow in update.c.
Exploit likelihood
What each source reports
NVD Score used
Multiple buffer overflows in MyDNS 1.1.0 allow remote attackers to (1) cause a denial of service (daemon crash) and possibly execute arbitrary code via a certain update, which triggers a heap-based buffer overflow in update.c; and (2) cause a denial of service (daemon crash) via unspecified vectors that trigger an off-by-one stack-based buffer overflow in update.c.
- Record
CVE-2007-2362- CVSS 2.0
- 9.0 High
AV:N/AC:L/Au:S/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Multiple buffer overflows in MyDNS 1.1.0 allow remote attackers to (1) cause a denial of service (daemon crash) and possibly execute arbitrary code via a certain update, which triggers a heap-based buffer overflow in update.c; and (2) cause a denial of service (daemon crash) via unspecified vectors that trigger an off-by-one stack-based buffer overflow in update.c.
- Record
CVE-2007-2362- Updated
- 2026-11-02
EUVDEUVD-2007-2357 No score
Multiple buffer overflows in MyDNS 1.1.0 allow remote attackers to (1) cause a denial of service (daemon crash) and possibly execute arbitrary code via a certain update, which triggers a heap-based buffer overflow in update.c; and (2) cause a denial of service (daemon crash) via unspecified vectors that trigger an off-by-one stack-based buffer overflow in update.c.
- Record
EUVD-2007-2357- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8c5w-487x-q6x4 No score
Multiple buffer overflows in MyDNS 1.1.0 allow remote attackers to (1) cause a denial of service ...
Multiple buffer overflows in MyDNS 1.1.0 allow remote attackers to (1) cause a denial of service (daemon crash) and possibly execute arbitrary code via a certain update, which triggers a heap-based buffer overflow in update.c; and (2) cause a denial of service (daemon crash) via unspecified vectors that trigger an off-by-one stack-based buffer overflow in update.c.
- Record
GHSA-8c5w-487x-q6x4- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
mydnsDebian:4.0 |
before 1:1.1.0-7etch1, plus listed versions 1:1.1.0-7 |
1:1.1.0-7etch1 |
mydnsDebian:5.0 |
before 1:1.1.0-7.1lenny1, plus listed versions 0.11.0-70.11.0-81.0.0-11.0.0-21.0.0-3 Show 13 moreShow less1.0.0-41.0.0-4sarge11.1.0+pre-11.1.0+pre-21.1.0+pre-31:1.1.0-11:1.1.0-21:1.1.0-31:1.1.0-41:1.1.0-51:1.1.0-61:1.1.0-71:1.1.0-7etch1 |
1:1.1.0-7.1lenny1 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | MyDNS 1.1.0 - Remote Heap Overflow (PoC) | 2007-04-27 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| affected, aliases, exploits, facts, references, title | Exploit-DB, GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-2362 is a high vulnerability (CVSS 9.0) in Don Moore Mydns, published April 30, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 16.1%, the 96th percentile. Fixed in mydns 1:1.1.0-7etch1.
References
exchange.xforce.ibmcloud.com/vulnerabilities/33933
osvdb.org/35439
lists.grok.org.uk/pipermail/full-disclosure/2007-April/054024.html
securityreason.com/securityalert/2658
securityfocus.com/bid/23694
debian.org/security/2007/dsa-1434