Domain Name System (DNS) Protocol Denial Of Service Vulnerability
Tuesday, 24 May 2005 by Michel Roth
A vulnerability was identified in the Domain Name System (DNS) protocol, which may be exploited by remote attackers to cause a denial of service. This flaw resides in the recursion process used by some DNS implementations to decompress compressed DNS messages (RFC1035), which may be exploited by attackers to cause a denial of service by sending a specially crafted DNS packet to a vulnerable server.

Read the advisory here.

Related Items:

Microsoft Windows IPv6 Remote Denial Of Service Vulnerability (18 May 2005)
McAfee Antivirus Products LHA Archive Stack Overflow Vulnerability (18 March 2005)
Citrix Presentation Server And MetaFrame Print Provider Buffer Overflow Vulnerability (24 January 2007)
Two Vulnerabilities In Presentation Server's IMA Service (9 November 2006)
Firefox IDN URL Domain Name Buffer Overflow (13 September 2005)
Wyse Winterm 1125SE IP Option Length Denial of Service (12 August 2005)
Security Updates Summary For May 2006 (9 May 2006)
RDP port denial of service (17 July 2005)
0-Day Microsoft Excel Unspecified Code Execution Vulnerability (19 June 2006)
Comments (0)add feed
Show/Hide comment formtoggle
password
 

busy