OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
dnsmasq <2.21 off-by-one

From: Alex (alex00882007gmail.com)
Date: Tue Mar 29 2005 - 09:53:42 CST


Yesterday I claimed the off-by-one vulnerability is not remotely
exploitable. It is. Anyone that leases from dnsmasq can take advantage
of two off-by-ones. Then when the lease file is read dnsmasq may
crash.