CVE-2008-1184 The DNSSEC validation library (libval) library in dnssec-tools before 1.3.1 does not properly check that the signing key is the APEX trust anchor, which might allow attackers to conduct unspecified at...
MediumCVSS 5.0
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The DNSSEC validation library (libval) library in dnssec-tools before 1.3.1 does not properly check that the signing key is the APEX trust anchor, which might allow attackers to conduct unspecified attacks.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dnssec-tools | <= 1.3.1 | No fix listed |
References
- 29095 third-party-advisory vendor-advisory
- 29127 patch third-party-advisory vendor-advisory
- sourceforge.net
- 27998 vdb-entry
- ADV-2008-0673 vdb-entry
- dnssectools-libval-security-bypass(40836) vdb-entry
- FEDORA-2008-1758 vendor-advisory
- FEDORA-2008-1771 vendor-advisory