PT-2008-5492 · None · Pdnsd

Published 2008-09-24 · Updated 2017-08-08 · CVE-2008-4194

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions pdnsd versions prior to 1.2.7-par

Description The issue is related to a dangling pointer bug in the p exec query function, allowing remote attackers to cause a denial of service by crashing the daemon with a long DNS reply containing many entries in the answer section.

Recommendations For versions prior to 1.2.7-par, update to version 1.2.7-par or later to resolve the issue.

Exploit

Fix

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2008-4194

Affected Products

Pdnsd

References · 8

• 🔥 https://exploit-db.com/exploits/6123 · Exploit
• 🔥 https://exploit-db.com/exploits/6122 · Exploit
• 🔥 https://exploit-db.com/exploits/6130 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-4194 · Security Note
• http://phys.uu.nl/~rombouts/pdnsd.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45594 · Note
• http://phys.uu.nl/~rombouts/pdnsd/ChangeLog · Note
• http://vupen.com/english/advisories/2008/2582 · Note