Vulnerability Development mailing list archives

dnsmasq <2.21 off-by-one


From: Alex <alex00882007 () gmail com>
Date: Tue, 29 Mar 2005 10:53:42 -0500

Yesterday I claimed the off-by-one vulnerability is not remotely
exploitable. It is. Anyone that leases from dnsmasq can take advantage
of two off-by-ones. Then when the lease file is read dnsmasq may
crash.


Current thread: