Dnstools Security Vulnerabilities

CVE-1999-1379

DNS allows remote attackers to use DNS name servers as traffic amplifiers via a UDP DNS query with a spoofed source address, which produces more traffic to the victim than was sent by the attacker.

CVE-2000-0177

DNSTools CGI applications allow remote attackers to execute arbitrary commands via shell metacharacters.

CVE-2002-0613

dnstools.php for DNSTools 2.0 beta 4 and earlier allows remote attackers to bypass authentication and gain privileges by setting the user_logged_in or user_dnstools_administrator parameters.