CVE-2004-0789 Multiple implementations of the DNS protocol, including (1) Poslib 1.0.2-1 and earlier as used by Posadis, (2) Axis Network products before firmware 3.13, and (3) Men & Mice Suite 2.2x before 2.2.3 an...
MediumCVSS 5.0
EPSS 2.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple implementations of the DNS protocol, including (1) Poslib 1.0.2-1 and earlier as used by Posadis, (2) Axis Network products before firmware 3.13, and (3) Men & Mice Suite 2.2x before 2.2.3 and 3.5.x before 3.5.2, allow remote attackers to cause a denial of service (CPU and network bandwidth consumption) by triggering a communications loop via (a) DNS query packets with localhost as a spoofed source address, or (b) a response packet that triggers a response packet.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| delegate | = 7.7.0 | No fix listed |
| delegate | = 7.7.1 | No fix listed |
| delegate | = 7.8.0 | No fix listed |
| delegate | = 7.8.1 | No fix listed |
| delegate | = 7.8.2 | No fix listed |
| delegate | = 7.9.11 | No fix listed |
| delegate | = 8.3.3 | No fix listed |
| delegate | = 8.3.4 | No fix listed |
| delegate | = 8.4.0 | No fix listed |
| delegate | = 8.5.0 | No fix listed |
| delegate | = 8.9 | No fix listed |
| delegate | = 8.9.1 | No fix listed |
| delegate | = 8.9.2 | No fix listed |
| delegate | = 8.9.3 | No fix listed |
| delegate | = 8.9.4 | No fix listed |
| delegate | = 8.9.5 | No fix listed |
| dnrd | = 1.0 | No fix listed |
| dnrd | = 1.1 | No fix listed |
| dnrd | = 1.2 | No fix listed |
| dnrd | = 1.3 | No fix listed |
| dnrd | = 1.4 | No fix listed |
| dnrd | = 2.0 | No fix listed |
| dnrd | = 2.1 | No fix listed |
| dnrd | = 2.2 | No fix listed |
| dnrd | = 2.3 | No fix listed |
Show 73 more
| Product | Affected versions | Fixed in |
|---|---|---|
| dnrd | = 2.4 | No fix listed |
| dnrd | = 2.5 | No fix listed |
| dnrd | = 2.6 | No fix listed |
| dnrd | = 2.7 | No fix listed |
| dnrd | = 2.8 | No fix listed |
| dnrd | = 2.9 | No fix listed |
| dnrd | = 2.10 | No fix listed |
| don moore mydns | = 0.6 | No fix listed |
| don moore mydns | = 0.7 | No fix listed |
| don moore mydns | = 0.8 | No fix listed |
| don moore mydns | = 0.9 | No fix listed |
| don moore mydns | = 0.10.0 | No fix listed |
| maradns | = 0.5.28 | No fix listed |
| maradns | = 0.5.29 | No fix listed |
| maradns | = 0.5.30 | No fix listed |
| maradns | = 0.5.31 | No fix listed |
| maradns | = 0.8.05 | No fix listed |
| pliant dns server | All versions | No fix listed |
| posadis | = 0.50.4 | No fix listed |
| posadis | = 0.50.5 | No fix listed |
| posadis | = 0.50.6 | No fix listed |
| posadis | = 0.50.7 | No fix listed |
| posadis | = 0.50.8 | No fix listed |
| posadis | = 0.50.9 | No fix listed |
| posadis | = 0.60.0 | No fix listed |
| posadis | = 0.60.1 | No fix listed |
| posadis | = m5pre1 | No fix listed |
| posadis | = m5pre2 | No fix listed |
| qbik wingate | = 3.0 | No fix listed |
| qbik wingate | = 4.0.1 | No fix listed |
| qbik wingate | = 4.1_beta_a | No fix listed |
| qbik wingate | = 6.0 | No fix listed |
| qbik wingate | = 6.0.1_build_993 | No fix listed |
| qbik wingate | = 6.0.1_build_995 | No fix listed |
| team johnlong raidendnsd | All versions | No fix listed |
| axis 2100 network camera | = 2.0 | No fix listed |
| axis 2100 network camera | = 2.01 | No fix listed |
| axis 2100 network camera | = 2.02 | No fix listed |
| axis 2100 network camera | = 2.03 | No fix listed |
| axis 2100 network camera | = 2.12 | No fix listed |
| axis 2100 network camera | = 2.30 | No fix listed |
| axis 2100 network camera | = 2.31 | No fix listed |
| axis 2100 network camera | = 2.32 | No fix listed |
| axis 2100 network camera | = 2.33 | No fix listed |
| axis 2100 network camera | = 2.34 | No fix listed |
| axis 2100 network camera | = 2.40 | No fix listed |
| axis 2100 network camera | = 2.41 | No fix listed |
| axis 2110 network camera | = 2.12 | No fix listed |
| axis 2110 network camera | = 2.30 | No fix listed |
| axis 2110 network camera | = 2.31 | No fix listed |
| axis 2110 network camera | = 2.32 | No fix listed |
| axis 2110 network camera | = 2.34 | No fix listed |
| axis 2110 network camera | = 2.40 | No fix listed |
| axis 2110 network camera | = 2.41 | No fix listed |
| axis 2120 network camera | = 2.12 | No fix listed |
| axis 2120 network camera | = 2.30 | No fix listed |
| axis 2120 network camera | = 2.31 | No fix listed |
| axis 2120 network camera | = 2.32 | No fix listed |
| axis 2120 network camera | = 2.34 | No fix listed |
| axis 2120 network camera | = 2.40 | No fix listed |
| axis 2120 network camera | = 2.41 | No fix listed |
| axis 2400 video server | = 3.11 | No fix listed |
| axis 2400 video server | = 3.12 | No fix listed |
| axis 2401 video server | = 3.12 | No fix listed |
| axis 2420 network camera | = 2.12 | No fix listed |
| axis 2420 network camera | = 2.30 | No fix listed |
| axis 2420 network camera | = 2.31 | No fix listed |
| axis 2420 network camera | = 2.32 | No fix listed |
| axis 2420 network camera | = 2.33 | No fix listed |
| axis 2420 network camera | = 2.34 | No fix listed |
| axis 2420 network camera | = 2.40 | No fix listed |
| axis 2420 network camera | = 2.41 | No fix listed |
| axis 2460 network dvr | = 3.12 | No fix listed |
References
- 13145 patch third-party-advisory
- 1012157 patch vdb-entry
- www.niscc.gov.uk vendor-advisory
- www.niscc.gov.uk vendor-advisory
- www.posadis.org patch vendor-advisory
- 11642 patch vdb-entry
- dns-localhost-dos(17997) vdb-entry