// For flags

CVE-2008-2357

 

Severity Score

6.8
*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

1
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Stack-based buffer overflow in the split_redraw function in split.c in mtr before 0.73, when invoked with the -p (aka --split) option, allows remote attackers to execute arbitrary code via a crafted DNS PTR record. NOTE: it could be argued that this is a vulnerability in the ns_name_ntop function in resolv/ns_name.c in glibc and the proper fix should be in glibc; if so, then this should not be treated as a vulnerability in mtr.

Desbordamiento de Búfer basado en pila de la función spot_redraw en split.c de mtr versiones anteriores a la 0.73, cuando se realiza una llamada a la función con la opción –p (también conocida como --split), permite a atacantes remotos ejecutar código arbitrariamente a través de registros DNS PTR manipulados. NOTA: es discutible que esta es una vulnerabilidad de la función _name_ntop en resolv/ns_name.c de glibc cuyo parche correspondiente estaría en glibc; si así fuera, entonces esto no debería tratarse como una vulnerabilidad de mtr.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Medium
Authentication
None
Confidentiality
Partial
Integrity
Partial
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2008-05-21 CVE Reserved
  • 2008-05-21 CVE Published
  • 2024-08-07 CVE Updated
  • 2024-08-07 First Exploit
  • 2024-10-23 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
CWE
  • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Matt Kimball And Roger Wolff
Search vendor "Matt Kimball And Roger Wolff"
Mtr
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr"
<= 0.72
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr" and version " <= 0.72"
-
Affected
Matt Kimball And Roger Wolff
Search vendor "Matt Kimball And Roger Wolff"
Mtr
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr"
0.21
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr" and version "0.21"
-
Affected
Matt Kimball And Roger Wolff
Search vendor "Matt Kimball And Roger Wolff"
Mtr
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr"
0.22
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr" and version "0.22"
-
Affected
Matt Kimball And Roger Wolff
Search vendor "Matt Kimball And Roger Wolff"
Mtr
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr"
0.23
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr" and version "0.23"
-
Affected
Matt Kimball And Roger Wolff
Search vendor "Matt Kimball And Roger Wolff"
Mtr
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr"
0.24
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr" and version "0.24"
-
Affected
Matt Kimball And Roger Wolff
Search vendor "Matt Kimball And Roger Wolff"
Mtr
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr"
0.25
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr" and version "0.25"
-
Affected
Matt Kimball And Roger Wolff
Search vendor "Matt Kimball And Roger Wolff"
Mtr
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr"
0.26
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr" and version "0.26"
-
Affected
Matt Kimball And Roger Wolff
Search vendor "Matt Kimball And Roger Wolff"
Mtr
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr"
0.27
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr" and version "0.27"
-
Affected
Matt Kimball And Roger Wolff
Search vendor "Matt Kimball And Roger Wolff"
Mtr
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr"
0.28
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr" and version "0.28"
-
Affected
Matt Kimball And Roger Wolff
Search vendor "Matt Kimball And Roger Wolff"
Mtr
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr"
0.29
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr" and version "0.29"
-
Affected
Matt Kimball And Roger Wolff
Search vendor "Matt Kimball And Roger Wolff"
Mtr
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr"
0.30
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr" and version "0.30"
-
Affected
Matt Kimball And Roger Wolff
Search vendor "Matt Kimball And Roger Wolff"
Mtr
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr"
0.31
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr" and version "0.31"
-
Affected
Matt Kimball And Roger Wolff
Search vendor "Matt Kimball And Roger Wolff"
Mtr
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr"
0.32
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr" and version "0.32"
-
Affected
Matt Kimball And Roger Wolff
Search vendor "Matt Kimball And Roger Wolff"
Mtr
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr"
0.33
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr" and version "0.33"
-
Affected
Matt Kimball And Roger Wolff
Search vendor "Matt Kimball And Roger Wolff"
Mtr
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr"
0.34
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr" and version "0.34"
-
Affected
Matt Kimball And Roger Wolff
Search vendor "Matt Kimball And Roger Wolff"
Mtr
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr"
0.35
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr" and version "0.35"
-
Affected
Matt Kimball And Roger Wolff
Search vendor "Matt Kimball And Roger Wolff"
Mtr
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr"
0.36
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr" and version "0.36"
-
Affected
Matt Kimball And Roger Wolff
Search vendor "Matt Kimball And Roger Wolff"
Mtr
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr"
0.37
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr" and version "0.37"
-
Affected
Matt Kimball And Roger Wolff
Search vendor "Matt Kimball And Roger Wolff"
Mtr
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr"
0.38
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr" and version "0.38"
-
Affected
Matt Kimball And Roger Wolff
Search vendor "Matt Kimball And Roger Wolff"
Mtr
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr"
0.39
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr" and version "0.39"
-
Affected
Matt Kimball And Roger Wolff
Search vendor "Matt Kimball And Roger Wolff"
Mtr
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr"
0.40
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr" and version "0.40"
-
Affected
Matt Kimball And Roger Wolff
Search vendor "Matt Kimball And Roger Wolff"
Mtr
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr"
0.41
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr" and version "0.41"
-
Affected
Matt Kimball And Roger Wolff
Search vendor "Matt Kimball And Roger Wolff"
Mtr
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr"
0.42
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr" and version "0.42"
-
Affected
Matt Kimball And Roger Wolff
Search vendor "Matt Kimball And Roger Wolff"
Mtr
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr"
0.43
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr" and version "0.43"
-
Affected
Matt Kimball And Roger Wolff
Search vendor "Matt Kimball And Roger Wolff"
Mtr
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr"
0.44
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr" and version "0.44"
-
Affected
Matt Kimball And Roger Wolff
Search vendor "Matt Kimball And Roger Wolff"
Mtr
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr"
0.45
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr" and version "0.45"
-
Affected
Matt Kimball And Roger Wolff
Search vendor "Matt Kimball And Roger Wolff"
Mtr
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr"
0.46
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr" and version "0.46"
-
Affected
Matt Kimball And Roger Wolff
Search vendor "Matt Kimball And Roger Wolff"
Mtr
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr"
0.47
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr" and version "0.47"
-
Affected
Matt Kimball And Roger Wolff
Search vendor "Matt Kimball And Roger Wolff"
Mtr
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr"
0.48
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr" and version "0.48"
-
Affected
Matt Kimball And Roger Wolff
Search vendor "Matt Kimball And Roger Wolff"
Mtr
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr"
0.49
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr" and version "0.49"
-
Affected
Matt Kimball And Roger Wolff
Search vendor "Matt Kimball And Roger Wolff"
Mtr
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr"
0.50
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr" and version "0.50"
-
Affected
Matt Kimball And Roger Wolff
Search vendor "Matt Kimball And Roger Wolff"
Mtr
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr"
0.51
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr" and version "0.51"
-
Affected
Matt Kimball And Roger Wolff
Search vendor "Matt Kimball And Roger Wolff"
Mtr
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr"
0.52
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr" and version "0.52"
-
Affected
Matt Kimball And Roger Wolff
Search vendor "Matt Kimball And Roger Wolff"
Mtr
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr"
0.53
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr" and version "0.53"
-
Affected
Matt Kimball And Roger Wolff
Search vendor "Matt Kimball And Roger Wolff"
Mtr
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr"
0.54
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr" and version "0.54"
-
Affected
Matt Kimball And Roger Wolff
Search vendor "Matt Kimball And Roger Wolff"
Mtr
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr"
0.55
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr" and version "0.55"
-
Affected
Matt Kimball And Roger Wolff
Search vendor "Matt Kimball And Roger Wolff"
Mtr
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr"
0.56
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr" and version "0.56"
-
Affected
Matt Kimball And Roger Wolff
Search vendor "Matt Kimball And Roger Wolff"
Mtr
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr"
0.57
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr" and version "0.57"
-
Affected
Matt Kimball And Roger Wolff
Search vendor "Matt Kimball And Roger Wolff"
Mtr
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr"
0.58
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr" and version "0.58"
-
Affected
Matt Kimball And Roger Wolff
Search vendor "Matt Kimball And Roger Wolff"
Mtr
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr"
0.59
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr" and version "0.59"
-
Affected
Matt Kimball And Roger Wolff
Search vendor "Matt Kimball And Roger Wolff"
Mtr
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr"
0.60
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr" and version "0.60"
-
Affected
Matt Kimball And Roger Wolff
Search vendor "Matt Kimball And Roger Wolff"
Mtr
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr"
0.61
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr" and version "0.61"
-
Affected
Matt Kimball And Roger Wolff
Search vendor "Matt Kimball And Roger Wolff"
Mtr
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr"
0.62
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr" and version "0.62"
-
Affected
Matt Kimball And Roger Wolff
Search vendor "Matt Kimball And Roger Wolff"
Mtr
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr"
0.63
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr" and version "0.63"
-
Affected
Matt Kimball And Roger Wolff
Search vendor "Matt Kimball And Roger Wolff"
Mtr
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr"
0.64
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr" and version "0.64"
-
Affected
Matt Kimball And Roger Wolff
Search vendor "Matt Kimball And Roger Wolff"
Mtr
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr"
0.65
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr" and version "0.65"
-
Affected
Matt Kimball And Roger Wolff
Search vendor "Matt Kimball And Roger Wolff"
Mtr
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr"
0.66
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr" and version "0.66"
-
Affected
Matt Kimball And Roger Wolff
Search vendor "Matt Kimball And Roger Wolff"
Mtr
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr"
0.67
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr" and version "0.67"
-
Affected
Matt Kimball And Roger Wolff
Search vendor "Matt Kimball And Roger Wolff"
Mtr
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr"
0.68
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr" and version "0.68"
-
Affected
Matt Kimball And Roger Wolff
Search vendor "Matt Kimball And Roger Wolff"
Mtr
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr"
0.69
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr" and version "0.69"
-
Affected
Matt Kimball And Roger Wolff
Search vendor "Matt Kimball And Roger Wolff"
Mtr
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr"
0.70
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr" and version "0.70"
-
Affected
Matt Kimball And Roger Wolff
Search vendor "Matt Kimball And Roger Wolff"
Mtr
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr"
0.71
Search vendor "Matt Kimball And Roger Wolff" for product "Mtr" and version "0.71"
-
Affected