PT-2005-1859 · Xzabite · Xzabite Dyndnsupdate

Toby Dickenson · Published 2005-03-22 · Updated 2008-09-05 · CVE-2005-0830

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Xzabite DYNDNSUpdate versions 0.6.15 and earlier

Description The issue is related to multiple buffer overflows, including the ipcheck function in dyndnsupdate.c. This allows remote attackers who spoof a dyndns.org server to execute arbitrary code via unknown vectors.

Recommendations For Xzabite DYNDNSUpdate versions 0.6.15 and earlier, consider disabling the ipcheck function in dyndnsupdate.c as a temporary workaround until a patch is available. Restrict access to the dyndns.org server to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2005-0830

Affected Products

Xzabite Dyndnsupdate

References · 4

• http://security.gentoo.org/glsa/glsa-200503-27.xml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-0830 · Security Note
• http://secunia.com/advisories/14663 · Vendor Advisory
• http://bugs.gentoo.org/show_bug.cgi?id=84659 · Vendor Advisory