Vulnerabilities > DON Moore

DATE CVE VULNERABILITY TITLE RISK
2007-04-30 CVE-2007-2362 Remote Dynamic DNS Update vulnerability in DON Moore Mydns 1.1.0
Multiple buffer overflows in MyDNS 1.1.0 allow remote attackers to (1) cause a denial of service (daemon crash) and possibly execute arbitrary code via a certain update, which triggers a heap-based buffer overflow in update.c; and (2) cause a denial of service (daemon crash) via unspecified vectors that trigger an off-by-one stack-based buffer overflow in update.c.
network
low complexity
don-moore
critical
9.0
2006-04-27 CVE-2006-2075 Denial-Of-Service vulnerability in DON Moore Mydns 1.1.0
Unspecified vulnerability in MyDNS 1.1.0 allows remote attackers to cause a denial of service via a crafted DNS message, aka "Query-of-death," as demonstrated by the OUSPG PROTOS DNS test suite.
network
low complexity
don-moore
5.0
2006-01-21 CVE-2006-0351 Denial Of Service vulnerability in MyDNS DNS Query
Unspecified "critical denial-of-service vulnerability" in MyDNS before 1.1.0 has unknown impact and attack vectors.
network
low complexity
don-moore
5.0
2004-12-31 CVE-2004-0789 Denial Of Service vulnerability in Multiple Vendor DNS Response Flooding
Multiple implementations of the DNS protocol, including (1) Poslib 1.0.2-1 and earlier as used by Posadis, (2) Axis Network products before firmware 3.13, and (3) Men & Mice Suite 2.2x before 2.2.3 and 3.5.x before 3.5.2, allow remote attackers to cause a denial of service (CPU and network bandwidth consumption) by triggering a communications loop via (a) DNS query packets with localhost as a spoofed source address, or (b) a response packet that triggers a response packet.
5.0