PT-2008-5492 · None · Pdnsd

Publicado 2008-09-24 · Atualizado 2017-08-08 · CVE-2008-4194

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions pdnsd versions prior to 1.2.7-par

Description The issue is related to a dangling pointer bug in the p exec query function, allowing remote attackers to cause a denial of service by crashing the daemon with a long DNS reply containing many entries in the answer section.

Recommendations For versions prior to 1.2.7-par, update to version 1.2.7-par or later to resolve the issue.

Exploit

Correção

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2008-4194

Produtos afetados

Pdnsd

Referências · 8

• 🔥 https://exploit-db.com/exploits/6123 · Exploit
• 🔥 https://exploit-db.com/exploits/6122 · Exploit
• 🔥 https://exploit-db.com/exploits/6130 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-4194 · Nota de Segurança
• http://phys.uu.nl/~rombouts/pdnsd.html · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45594 · Nota
• http://phys.uu.nl/~rombouts/pdnsd/ChangeLog · Nota
• http://vupen.com/english/advisories/2008/2582 · Nota