medium5.0

CVE-2004-0789

Multiple implementations of the DNS protocol, including (1) Poslib 1.0.2-1 and earlier as used by Posadis, (2) Axis Network products before firmware 3.13, and …

Impact

Multiple implementations of the DNS protocol, including (1) Poslib 1.0.2-1 and earlier as used by Posadis, (2) Axis Network products before firmware 3.13, and (3) Men & Mice Suite 2.2x before 2.2.3 and 3.5.x before 3.5.2, allow remote attackers to cause a denial of service (CPU and network bandwidth consumption) by triggering a communications loop via (a) DNS query packets with localhost as a spoofed source address, or (b) a response packet that triggers a response packet.

Affected products

Vendor	Product	Affected versions
Delegate	Delegate	Versions 7.7.0, 7.7.1, 7.8.0, 7.8.1, 7.8.2, 7.9.11
Dnrd	Dnrd	Versions 1.0, 1.1, 1.2, 1.3, 1.4, 2.0
Don Moore	Mydns	Versions 0.6, 0.7, 0.8, 0.9, 0.10.0
Maradns	Maradns	Versions 0.5.28, 0.5.29, 0.5.30, 0.5.31, 0.8.05
Pliant	Pliant Dns Server	All versions
Posadis	Posadis	Versions 0.50.4, 0.50.5, 0.50.6, 0.50.7, 0.50.8, 0.50.9
Qbik	Wingate	Versions 3.0, 4.0.1, 4.1_beta_a, 6.0, 6.0.1_build_993, 6.0.1_build_995
Team Johnlong	Raidendnsd	All versions
Axis	2100 Network Camera	Versions 2.0, 2.01, 2.02, 2.03, 2.12, 2.30
Axis	2110 Network Camera	Versions 2.12, 2.30, 2.31, 2.32, 2.34, 2.40
Axis	2120 Network Camera	Versions 2.12, 2.30, 2.31, 2.32, 2.34, 2.40
Axis	2400 Video Server	Versions 3.11, 3.12

Impact

Affected products

References