Vulnerabilities > CVE-2002-0140 - Denial Of Service vulnerability in DNRD DNS Request/Reply

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
dnrd
exploit available
NVD
Published: 2002-03-25
Updated: 2008-09-11

Summary

Domain Name Relay Daemon (dnrd) 2.10 and earlier allows remote malicious DNS sites to cause a denial of service and possibly execute arbitrary code via a long or malformed DNS reply, which is not handled properly by parse_query, get_objectname, and possibly other functions.

Vulnerable Configurations

Part Description Count
Application
Dnrd
16

Exploit-Db

descriptionDNRD 1.x/2.x DNS Request/Reply Denial Of Service Vulnerability. CVE-2002-0140. Dos exploit for unix platform
idEDB-ID:21236
last seen2016-02-02
modified2002-01-20
published2002-01-20
reporterAndrew Griffiths
sourcehttps://www.exploit-db.com/download/21236/
titleDNRD 1.x/2.x DNS Request/Reply Denial of Service Vulnerability

References