DEBIAN-CVE-2009-0858

The responseaddname function in response.c in Daniel J. Bernstein djbdns 1.05 and earlier does not constrain offsets in the required manner, which allows remote attackers, with control over a third-party subdomain served by tinydns and axfrdns, to trigger DNS responses containing arbitrary record...

CVE-2009-0858

djbdns (tinydns/axfrdns) 1.05 and earlier contains a programming error that does not constrain offsets as required, enabling remote attackers controlling a subdomain to trigger DNS responses containing arbitrary records via crafted zone data. In Debian, this was addressed in DSA-1831-1 with fixes...

CVE-2009-0858: Improper Input Validation

The responseaddname function in response.c in Daniel J. Bernstein djbdns 1.05 and earlier does not constrain offsets in the required manner, which allows remote attackers, with control over a third-party subdomain served by tinydns and axfrdns, to trigger DNS responses containing arbitrary record...