CVE

Id
9217  
CVE No.
CVE-2004-0789  
Status
Candidate  
Description
Multiple implementations of the DNS protocol, including (1) Poslib 1.0.2-1 and earlier as used by Posadis, (2) Axis Network products before firmware 3.13, and (3) Men & Mice Suite 2.2x before 2.2.3 and 3.5.x before 3.5.2, allow remote attackers to cause a denial of service (CPU and network bandwidth consumption) by triggering a communications loop via (a) DNS query packets with localhost as a spoofed source address, or (b) a response packet that triggers a response packet.  
Phase
Assigned (20040817)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
60536 9217 CVE-2004-0789 MISC:http://www.niscc.gov.uk/niscc/docs/al-20041130-00862.html?lang=en  View
60537 9217 CVE-2004-0789 MISC:http://www.niscc.gov.uk/niscc/docs/re-20041109-00957.pdf  View
60538 9217 CVE-2004-0789 CONFIRM:http://www.posadis.org/advisories/pos_adv_006.txt  View
60539 9217 CVE-2004-0789 BID:11642  View
60540 9217 CVE-2004-0789 URL:http://www.securityfocus.com/bid/11642  View
60541 9217 CVE-2004-0789 SECTRACK:1012157  View
60542 9217 CVE-2004-0789 URL:http://securitytracker.com/id?1012157  View
60543 9217 CVE-2004-0789 SECUNIA:13145  View
60544 9217 CVE-2004-0789 URL:http://secunia.com/advisories/13145  View
60545 9217 CVE-2004-0789 XF:dns-localhost-dos(17997)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62056 JVNDB-2005-000258 TCP 実装における ICMP エラーメッセージ処理による TCP コネクション切断の脆弱性 複数のベンダ製品における TCP の実装には、ICMP エラーメッセージに含まれる IP アドレスと TCP ポートの妥当性だけが検証され、シーケンス番号が適切な範囲内にあるかチェックしない不備が存在します。これにより、不正な ICMP hard error メッセージの処理により、TCP コネクションがリセットされる脆弱性が存在します。 CVE-2004-0790 9217 5 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000258.html  View