PT-2005-1905 · Dnsmasq · Dnsmasq

Published 2005-03-26 · Updated 2024-02-08 · CVE-2005-0877

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Dnsmasq versions prior to 2.21

Description The issue allows remote attackers to poison the DNS cache via answers to queries that were not made by Dnsmasq.

Recommendations For versions prior to 2.21, update to version 2.21 or later to resolve the issue.

Fix

Origin Validation Error

Weakness Enumeration

CWE-346

Related Identifiers

CVE-2005-0877

Affected Products

Dnsmasq

References · 8

• http://secunia.com/advisories/14691 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-0877 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2005-0877 · Vendor Advisory
• http://securityfocus.com/bid/12897 · Patch
• https://osv.dev/vulnerability/CVE-2005-0877 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-0877 · Vendor Advisory
• http://thekelleys.org.uk/dnsmasq/CHANGELOG · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19826 · Note