Description
Multiple buffer overflows in MyDNS 1.1.0 allow remote attackers to (1) cause a denial of service (daemon crash) and possibly execute arbitrary code via a certain update, which triggers a heap-based buffer overflow in update.c; and (2) cause a denial of service (daemon crash) via unspecified vectors that trigger an off-by-one stack-based buffer overflow in update.c.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 5.0 | mydns | 1:1.1.0-7.1lenny1 | DTSA-36-1 |
| Debian 4.0 | mydns | 1:1.1.0-7etch1 | DSA-1434-1 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Exploit-DB 1
- MyDNS 1.1.0 - Remote Heap Overflow (PoC) EDB-3807 · dos · Apr 27, 2007 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 2
- DTSA-36-1 mydns - multiple buffer overflows Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-1434-1 mydns - denial of service Debian Security (DSA / DLA) · Mar 9, 2026
References
- mydns-update-bo(33933) vdb-entry
- 35439 vdb-entry
- 20070427 mydns-1.1.0 remote heap overflow mailing-list
- 2658 third-party-advisory
- 23694 vdb-entry
- DSA-1434 vendor-advisory
- 25007 third-party-advisory
- ADV-2007-1561 vdb-entry
- http://www.digit-labs.org/files/exploits/mydns-rr-smash.c
- 35438 vdb-entry
- 28086 third-party-advisory
- http://www.digit-labs.org/files/patches/mydns-update.c.diff