CVE

Id
34027  
CVE No.
CVE-2008-3910  
Status
Candidate  
Description
dns2tcp before 0.4.1 does not properly handle negative values in a certain length field in the input argument to the (1) dns_simple_decode or (2) dns_decode function, which allows remote attackers to overwrite a buffer and have unspecified other impact.  
Phase
Assigned (20080904)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
371604 34027 CVE-2008-3910 MLIST:[oss-security] 20080904 CVE id request: dns2tcp  View
371605 34027 CVE-2008-3910 URL:http://www.openwall.com/lists/oss-security/2008/09/03/5  View
371606 34027 CVE-2008-3910 CONFIRM:http://www.hsc.fr/ressources/outils/dns2tcp/index.html.en  View
371607 34027 CVE-2008-3910 BID:31080  View
371608 34027 CVE-2008-3910 URL:http://www.securityfocus.com/bid/31080  View
371609 34027 CVE-2008-3910 XF:dns2tcp-dnssimpledecode-dnsdecode-bo(44974)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
46501 JVNDB-2008-001811 ClamAV におけるファイルディスクリプタが漏えいする脆弱性 ClamAV には、libclamav/others.c および libclamav/sis.c においてファイルディスクリプタが漏えいする脆弱性が存在します。 CVE-2008-3914 34027 10 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001811.html  View