© 2026 vulntracker.io

CVE-2008-2357

N/A

Published: May 21, 2008 at 10:00 AM UTC

Updated: June 16, 2026 at 10:53 PM UTC

1 product affected across 1 vendorMtr

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 5%

Description

Stack-based buffer overflow in the split_redraw function in split.c in mtr before 0.73, when invoked with the -p (aka --split) option, allows remote attackers to execute arbitrary code via a crafted DNS PTR record. NOTE: it could be argued that this is a vulnerability in the ns_name_ntop function in resolv/ns_name.c in glibc and the proper fix should be in glibc; if so, then this should not be treated as a vulnerability in mtr.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Mtr · Matt Kimball and Roger Wolff

95%

v ≤ 0.720.21 0.22 0.23 0.24 0.25 0.26 0.27 0.28 0.29 0.30 0.31 0.32 0.33 0.34 0.35 0.36 0.37 0.38 0.39 0.40 0.41 0.42 0.43 0.44 0.45 0.46 0.47 0.48 0.49 0.50 0.51 0.52 0.53 0.54 0.55 0.56 0.57 0.58 0.59 0.60 0.61 0.62 0.63 0.64 0.65 0.66 0.67 0.68 0.69 0.70 0.71

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (21)

x_refsource_CONFIRM

Source: [email protected]

ftp://ftp.bitwizard.nl/mtr/mtr-0.73.diff

Vendor Advisoryx_refsource_SUSE

Source: [email protected]

http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html

Mailing Listx_refsource_FULLDISCExploit

Source: [email protected]

http://seclists.org/fulldisclosure/2008/May/0488.html

Third Party Advisoryx_refsource_SECUNIAVendor Advisory

Source: [email protected]

http://secunia.com/advisories/30312

Third Party Advisoryx_refsource_SECUNIA

Source: [email protected]

http://secunia.com/advisories/30340

Third Party Advisoryx_refsource_SECUNIA

Source: [email protected]

http://secunia.com/advisories/30359

Third Party Advisoryx_refsource_SECUNIA

Source: [email protected]

http://secunia.com/advisories/30522

Third Party Advisoryx_refsource_SECUNIA

Source: [email protected]

http://secunia.com/advisories/30967

CVSS

6.8MEDIUM[email protected]

Confidentiality: PARTIAL
Integrity: PARTIAL
Availability: PARTIAL

Vector?

Quick Info

StatusMODIFIED

CWE

CWE-119

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card