CVE-2007-6341 Net/DNS/RR/A.pm in Net::DNS 0.60 build 654, as used in packages such as SpamAssassin and OTRS, allows remote attackers to cause a denial of service (program "croak") via a crafted DNS response.
MediumCVSS 5.0
EPSS 9.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Net/DNS/RR/A.pm in Net::DNS 0.60 build 654, as used in packages such as SpamAssassin and OTRS, allows remote attackers to cause a denial of service (program "croak") via a crafted DNS response.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| net dns | = 0.60-build_654 | No fix listed |
| debian/libnet-dns-perl(Debian:12) | < 0.63-1 | 0.63-1 |
| debian/libnet-dns-perl(Debian:13) | < 0.63-1 | 0.63-1 |
| debian/libnet-dns-perl(Debian:14) | < 0.63-1 | 0.63-1 |
References
- Debian Security Tracker CVE-2007-6341 vendor-advisory
- bugs.debian.org issue-tracking
- search.cpan.org
- 29343 third-party-advisory
- 29354 third-party-advisory
- 29446 third-party-advisory
- 29555 third-party-advisory
- DSA-1515 vendor-advisory
- MDVSA-2008:073 vendor-advisory
- www.securiteam.com exploit
- 26902 exploit vdb-entry
- 1019104 vdb-entry
- rt.cpan.org exploit
- USN-594-1 vendor-advisory