Published: 20/12/2007 Updated: 03/10/2018

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 505

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Net/DNS/RR/A.pm in Net::DNS 0.60 build 654, as used in packages such as SpamAssassin and OTRS, allows remote malicious users to cause a denial of service (program "croak") via a crafted DNS response.

Vulnerable Product	Search on Vulmon	Subscribe to Product
net dns net dns 0.60

Debian Bug report logs - #457445 libnet-dns-perl: CVE-2007-6341 possible remote denial of service vulnerability Package: libnet-dns-perl; Maintainer for libnet-dns-perl is Debian Perl Group <pkg-perl-maintainers@listsaliothdebianorg>; Source for libnet-dns-perl is src:libnet-dns-perl (PTS, buildd, popcon) Reported by: Nic ...

It was discovered that Net::DNS did not correctly validate the size of DNS replies A remote attacker could send a specially crafted DNS response and cause applications using Net::DNS to abort, leading to a denial of service ...

source: wwwsecurityfocuscom/bid/26902/info The Perl Net::DNS module is prone to a remote denial-of-service vulnerability because the module fails to properly handle malformed DNS responses Successfully exploiting this issue allows attackers to crash applications that use the affected module Net::DNS 060 is vulnerable; other versions ...

CWE-119 http://www.securiteam.com/unixfocus/6I00E0UKKQ.html https://rt.cpan.org/Public/Bug/Display.html?id=30316 http://www.securityfocus.com/bid/26902 http://www.securitytracker.com/id?1019104 http://search.cpan.org/src/OLAF/Net-DNS-0.63/Changes http://www.debian.org/security/2008/dsa-1515 http://secunia.com/advisories/29343 http://secunia.com/advisories/29354 http://www.mandriva.com/security/advisories?name=MDVSA-2008:073 http://secunia.com/advisories/29446 http://secunia.com/advisories/29555 https://usn.ubuntu.com/594-1/https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=457445 https://usn.ubuntu.com/594-1/https://nvd.nist.gov https://www.exploit-db.com/exploits/30895/

CVE-2007-6341

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect