CVE-2002-0140
dnrd 2.10 and earlier - Denial of Service and Possible Remote Code Execution via Malformed DNS Reply
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2002-0140. PoCs published by Andrew Griffiths.
AI-analyzed exploit summary This exploit leverages a lack of bounds checking in dnrd's DNS request/reply functions to trigger a denial of service via a malformed UDP packet. The PoC generates random data and sends it to the target's DNS port (53/UDP), causing the service to crash.
Description
Domain Name Relay Daemon (dnrd) 2.10 and earlier allows remote malicious DNS sites to cause a denial of service and possibly execute arbitrary code via a long or malformed DNS reply, which is not handled properly by parse_query, get_objectname, and possibly other functions.
Exploits (1)
This exploit leverages a lack of bounds checking in dnrd's DNS request/reply functions to trigger a denial of service via a malformed UDP packet. The PoC generates random data and sends it to the target's DNS port (53/UDP), causing the service to crash.