FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

maradns -- CNAME record resource rotation denial of service

Affected packages
maradns <


VuXML ID f358de71-bf64-11dc-928b-0016179b2dd5
Discovery 2008-01-04
Entry 2008-01-10

Secunia reports:

A vulnerability has been reported in MaraDNS, which can be exploited by malicious people to cause a Denial of Service.

The vulnerability is caused due to an error within the handling of certain DNS packets. This can be exploited to cause a resource rotation by sending specially crafted DNS packets, which cause an authoritative CNAME record to not resolve, resulting in a Denial of Sevices.


CVE Name CVE-2008-0061