CVE-2007-6341

Net/DNS/RR/A.pm in Net::DNS 0.60 build 654, as used in packages such as SpamAssassin and OTRS, allows remote attackers to cause a denial of service program "croak" via a crafted DNS response...

Code injection

Net/DNS/RR/A.pm in Net::DNS 0.60 build 654, as used in packages such as SpamAssassin and OTRS, allows remote attackers to cause a denial of service program "croak" via a crafted DNS response...

CVE-2007-6341

Net/DNS/RR/A.pm in Net::DNS 0.60 build 654, as used in packages such as SpamAssassin and OTRS, allows remote attackers to cause a denial of service program "croak" via a crafted DNS response...

CVE-2007-6341

Net/DNS/RR/A.pm in Net::DNS 0.60 build 654, as used in packages such as SpamAssassin and OTRS, allows remote attackers to cause a denial of service program "croak" via a crafted DNS response...

CVE-2007-6341

CVE-2007-6341 affects Net::DNS (Net::DNS perl module) in version 0.60 build 654, used by SpamAssassin and OTRS. A crafted DNS response can cause a remote DoS (process crash croak). Public references show Debian/Ubuntu patches and advisories updating libnet-dns-perl to fixed releases (e.g., DSA-15...

Perl Net::DNS DNS应答远程拒绝服务漏洞

BUGTRAQ ID: 26902 CVE ID：CVE-2007-6341 Perl Net::DNS是一款使用Perl实现的DNS解析应用程序。 Perl Net::DNS不正确处理畸形应答请求，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 问题存在于Net/DNS/RR/A.pm： if $self-"rdlength" 0 $self-"address" = inetntoasubstr$$data, $offset, 4; 由于在使用substr时不正确验证$$data有4字节可读，可导致数据发送给inetntoa不足够而导致触发如下代码： ipaddress =...

Perl Net::DNS 0.480.590.60 - DNS Response Remote Denial of Service

Perl Net::DNS 0.480.590.60 - DNS Response Remote Denial of Service source: https://www.securityfocus.com/bid/26902/info The Perl Net::DNS module is prone to a remote denial-of-service vulnerability because the module fails to properly handle malformed DNS responses. Successfully exploiting this...

Perl Net::DNS 0.48/0.59/0.60 - DNS Response Remote Denial of Service

source: https://www.securityfocus.com/bid/26902/info The Perl Net::DNS module is prone to a remote denial-of-service vulnerability because the module fails to properly handle malformed DNS responses. Successfully exploiting this issue allows attackers to crash applications that use the affected...

Perl Net::DNS package multiple security vulnerabilities

Weak DNS ID generation allows response spoofing, DoS on parsing DNS request...

[UNIX] Net::DNS Malformed Packet DoS

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

SuSE 10 Security Update : perl-Net-DNS (ZYPP Patch Number 4046)

perl-Net-DNS used sequential IDs for DNS lookups which could cause problem with some programs like spamassassin. It potentially also simplified DNS spoofing attacks against perl-Net-DNS. CVE-2007-3377 Additionally malformed compressed DNS packets could trigger an endless loop in perl-Net-DNS...

Fedora 7 : perl-Net-DNS-0.60-1.fc7 (2007-0668)

This brings F-7 up to date with the latest changes to Net::DNS. See the project page here : http://search.cpan.org/olaf/Net-DNS-0.60/ The change for this upstream issue is included : http://rt.cpan.org/Public/Bug/Display.html?id=23961 Since this fix has security implications making DNS spoofing...

DNS Recursion bandwidth amplification Denial of Service PoC

Exploit for multiple platform in category dos / poc =========================================================== DNS Recursion bandwidth amplification Denial of Service PoC =========================================================== !/usr/bin/perl Get Net::RawIP at...

DNS Recursion Bandwidth Amplification - Denial of Service (PoC)

DNS Recursion Bandwidth Amplification - Denial of Service PoC !/usr/bin/perl Get Net::RawIP at http://search.cpan.org/CPAN/authors/id/S/SZ/SZABGAB/Net-RawIP-0.2101.tar.gz cpan Net::DNS:Resolver seems to work fine on each machine I throw it on, as well. PS: To see if you can spoof, check out the A...

spoofer2.pl.txt

!/usr/bin/perl Get Net::RawIP at http://search.cpan.org/CPAN/authors/id/S/SZ/SZABGAB/Net-RawIP-0.2101.tar.gz cpan Net::DNS:Resolver seems to work fine on each machine I throw it on, as well. PS: To see if you can spoof, check out the ANA Spoofer project. http://spoofer.csail.mit.edu/ Written by...

openSUSE 10 Security Update : perl-Net-DNS (perl-Net-DNS-3961)

perl-Net-DNS used sequential IDs for DNS lookups which could cause problem with some programs like spamassassin. It potentially also simplified DNS spoofing attacks against perl-Net-DNS CVE-2007-3377. Additionally malformed compressed DNS packets could trigger an endless loop in perl-Net-DNS...

GLSA-200708-06 : Net::DNS: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200708-06 Net::DNS: Multiple vulnerabilities hjp discovered an error when handling DNS query IDs which make them partially predictable. Steffen Ullrich discovered an error in the dnexpand function which could lead to an endless...

Net::DNS: Multiple vulnerabilities

Background Net::DNS is a Perl implementation of a DNS resolver. Description hjp discovered an error when handling DNS query IDs which make them partially predictable. Steffen Ullrich discovered an error in the dnexpand function which could lead to an endless loop. Impact A remote attacker could...

FreeBSD : p5-Net-DNS -- multiple Vulnerabilities (d2b8a963-3d59-11dc-b3d3-0016179b2dd5)

A Secunia Advisory reports : An error exists in the handling of DNS queries where IDs are incremented with a fixed value and are additionally used for child processes in a forking server. This can be exploited to poison the DNS cache of an application using the module if a valid ID is guessed. An...

Mandrake Linux Security Advisory : perl-Net-DNS (MDKSA-2007:146)

A flaw was discovered in the perl Net::DNS module in the way it generated the ID field in a DNS query. Because it is so predictable, a remote attacker could exploit this to return invalid DNS data CVE-2007-3377. A denial of service vulnerability was found in how Net::DNS parsed certain DNS...