PT-2005-1161 · Dnrd · Dnrd

Published 2005-12-31 · Updated 2008-09-05 · CVE-2005-0037

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions DNRD versions prior to 2.10

Description The issue allows remote attackers to cause a denial of service via a compressed DNS packet with a label length byte that has an incorrect offset, potentially triggering an infinite loop.

Recommendations For versions prior to 2.10, update to version 2.10 or later to resolve the issue.

Fix

Related Identifiers

CVE-2005-0037

Affected Products

Dnrd

References · 5

• http://niscc.gov.uk/niscc/docs/al-20050524-00433.html · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2005-0037 · Security Note
• http://securityfocus.com/bid/13729 · Note
• http://niscc.gov.uk/niscc/docs/re-20050524-00432.pdf?lang=en · Note
• http://osvdb.org/25291 · Note