← back
CVE-2007-1866

CVE-2007-1866

EPSS 10.2%
Stack-based buffer overflow in the dns_decode_reverse_name function in dns_decode.c in dproxy-nexgen allows remote attackers to execute arbitrary code by sending a crafted packet to port 53/udp, a different issue than CVE-2007-1465.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/3615unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://dproxy.cvs.sourceforge.net/dproxy/dproxy-nexgen/dns_decode.c?revision=1.10&view=markuphttp://lists.grok.org.uk/pipermail/full-disclosure/2007-March/053289.htmlhttp://lists.grok.org.uk/pipermail/full-disclosure/2007-March/053302.htmlhttp://secunia.com/advisories/24688http://securityreason.com/securityalert/2518https://exchange.xforce.ibmcloud.com/vulnerabilities/33753http://www.vupen.com/english/advisories/2007/1194