Multiple off-by-one errors in VooDoo cIRCle before 1.1.beta27 allow remote attackers to cause a denial of service (connection loss) or possibly execute arbitrary code via a (1) DNS name response of the exact length as a buffer; or a long (2) channel name, (3) partyline channel name, or unspecified vectors in crafted BOTNET packets.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2007-05-14 14:19
Updated : 2017-07-28 18:31
NVD link : CVE-2007-2651
Mitre link : CVE-2007-2651
JSON object : View
CWE
Products Affected
voodoo_circle
- voodoo_circle