CVE-2007-6341

Net/DNS/RR/A.pm in Net::DNS 0.60 build 654, as used in packages such as SpamAssassin and OTRS, allows remote attackers to cause a denial of service (program "croak") via a crafted DNS response.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2007-12-20

Last modified

2024-08-07

Weaknesses

CWE-119

Affected products

• Net Dns (Net Dns)

References

• http://search.cpan.org/src/OLAF/Net-DNS-0.63/Changes
• http://secunia.com/advisories/29343
• http://secunia.com/advisories/29354
• http://secunia.com/advisories/29446
• http://secunia.com/advisories/29555
• http://www.debian.org/security/2008/dsa-1515
• http://www.mandriva.com/security/advisories?name=MDVSA-2008:073
• http://www.securiteam.com/unixfocus/6I00E0UKKQ.html
• http://www.securityfocus.com/bid/26902
• http://www.securitytracker.com/id?1019104
• https://rt.cpan.org/Public/Bug/Display.html?id=30316
• https://usn.ubuntu.com/594-1/