[UNIX] Net::DNS Malformed Packet DoS

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

Perl Net::DNS 0.48/0.59/0.60 - DNS Response Remote Denial of Service

source: https://www.securityfocus.com/bid/26902/info The Perl Net::DNS module is prone to a remote denial-of-service vulnerability because the module fails to properly handle malformed DNS responses. Successfully exploiting this issue allows attackers to crash applications that use the affected...

SuSE 10 Security Update : perl-Net-DNS (ZYPP Patch Number 4046)

perl-Net-DNS used sequential IDs for DNS lookups which could cause problem with some programs like spamassassin. It potentially also simplified DNS spoofing attacks against perl-Net-DNS. CVE-2007-3377 Additionally malformed compressed DNS packets could trigger an endless loop in perl-Net-DNS...

Fedora 7 : perl-Net-DNS-0.60-1.fc7 (2007-0668)

This brings F-7 up to date with the latest changes to Net::DNS. See the project page here : http://search.cpan.org/olaf/Net-DNS-0.60/ The change for this upstream issue is included : http://rt.cpan.org/Public/Bug/Display.html?id=23961 Since this fix has security implications making DNS spoofing...

DNS Recursion bandwidth amplification Denial of Service PoC

Exploit for multiple platform in category dos / poc =========================================================== DNS Recursion bandwidth amplification Denial of Service PoC =========================================================== !/usr/bin/perl Get Net::RawIP at...

spoofer2.pl.txt

!/usr/bin/perl Get Net::RawIP at http://search.cpan.org/CPAN/authors/id/S/SZ/SZABGAB/Net-RawIP-0.2101.tar.gz cpan Net::DNS:Resolver seems to work fine on each machine I throw it on, as well. PS: To see if you can spoof, check out the ANA Spoofer project. http://spoofer.csail.mit.edu/ Written by...

DNS Recursion Bandwidth Amplification - Denial of Service (PoC)

DNS Recursion Bandwidth Amplification - Denial of Service PoC !/usr/bin/perl Get Net::RawIP at http://search.cpan.org/CPAN/authors/id/S/SZ/SZABGAB/Net-RawIP-0.2101.tar.gz cpan Net::DNS:Resolver seems to work fine on each machine I throw it on, as well. PS: To see if you can spoof, check out the A...

openSUSE 10 Security Update : perl-Net-DNS (perl-Net-DNS-3961)

perl-Net-DNS used sequential IDs for DNS lookups which could cause problem with some programs like spamassassin. It potentially also simplified DNS spoofing attacks against perl-Net-DNS CVE-2007-3377. Additionally malformed compressed DNS packets could trigger an endless loop in perl-Net-DNS...

GLSA-200708-06 : Net::DNS: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200708-06 Net::DNS: Multiple vulnerabilities hjp discovered an error when handling DNS query IDs which make them partially predictable. Steffen Ullrich discovered an error in the dnexpand function which could lead to an endless...

Net::DNS: Multiple vulnerabilities

Background Net::DNS is a Perl implementation of a DNS resolver. Description hjp discovered an error when handling DNS query IDs which make them partially predictable. Steffen Ullrich discovered an error in the dnexpand function which could lead to an endless loop. Impact A remote attacker could...

FreeBSD : p5-Net-DNS -- multiple Vulnerabilities (d2b8a963-3d59-11dc-b3d3-0016179b2dd5)

A Secunia Advisory reports : An error exists in the handling of DNS queries where IDs are incremented with a fixed value and are additionally used for child processes in a forking server. This can be exploited to poison the DNS cache of an application using the module if a valid ID is guessed. An...

RHEL 4 : perl-Net-DNS (RHSA-2007:0675)

An updated perl-Net-DNS package that corrects a security issue is now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Net::DNS is a collection of Perl modules that act as a Domain Name System DNS...

CentOS 3 / 5 : perl-Net-DNS (CESA-2007:0674)

Updated perl-Net-DNS packages that correct two security issues are now available for Red Hat Enterprise Linux 3 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Net::DNS is a collection of Perl modules that act as a Domain Name System DNS...

CentOS 4 : perl-Net-DNS (CESA-2007:0675)

An updated perl-Net-DNS package that corrects a security issue is now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Net::DNS is a collection of Perl modules that act as a Domain Name System DNS...

Mandrake Linux Security Advisory : perl-Net-DNS (MDKSA-2007:146)

A flaw was discovered in the perl Net::DNS module in the way it generated the ID field in a DNS query. Because it is so predictable, a remote attacker could exploit this to return invalid DNS data CVE-2007-3377. A denial of service vulnerability was found in how Net::DNS parsed certain DNS...

RHEL 3 / 5 : perl-Net-DNS (RHSA-2007:0674)

Updated perl-Net-DNS packages that correct two security issues are now available for Red Hat Enterprise Linux 3 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Net::DNS is a collection of Perl modules that act as a Domain Name System DNS...

USN-483-1: libnet-dns-perl vulnerabilities

Peter Johannes Holzer discovered that the Net::DNS Perl module had predictable sequence numbers. This could allow remote attackers to carry out DNS spoofing, leading to possible machine-in-the-middle attacks. CVE-2007-3377 Steffen Ullrich discovered that the Net::DNS Perl module did not correctly...

[Full-disclosure] [ MDKSA-2007:146 ] - Updated perl-Net-DNS packages fix multiple vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:146 http://www.mandriva.com/security/ Package : perl-Net-DNS Date : July 12, 2007 Affected: 2007.0, 2007.1, Corporate 3.0, Corporate 4.0 Problem Description: A flaw was discovered in the perl Net::DNS module...

perl security update

CentOS Errata and Security Advisory CESA-2007:0675 An updated perl-Net-DNS package that corrects a security issue is now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Net::DNS is a collection of Perl...

perl security update

CentOS Errata and Security Advisory CESA-2007:0674 Updated perl-Net-DNS packages that correct two security issues are now available for Red Hat Enterprise Linux 3 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Net::DNS is a collection o...