CVE-2007-6341

Net::DNS <0.60 - DoS

Title source: llm

Description

Net/DNS/RR/A.pm in Net::DNS 0.60 build 654, as used in packages such as SpamAssassin and OTRS, allows remote attackers to cause a denial of service (program "croak") via a crafted DNS response.

Exploits (1)

exploitdb WORKING POC VERIFIED

by beSTORM · perldoslinux

https://www.exploit-db.com/exploits/30895

View Code ZIP pw:eip

References (12)

[Third Party Advisory] http://secunia.com/advisories/29354

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id?1019104

[Various Sources] http://search.cpan.org/src/OLAF/Net-DNS-0.63/Changes

[Third Party Advisory] http://secunia.com/advisories/29555

[Third Party Advisory] http://www.debian.org/security/2008/dsa-1515

[Exploit] https://rt.cpan.org/Public/Bug/Display.html?id=30316

[Exploit] http://www.securiteam.com/unixfocus/6I00E0UKKQ.html

[Third Party Advisory] http://secunia.com/advisories/29343

[Vendor Advisory] https://usn.ubuntu.com/594-1/

[Third Party Advisory] http://secunia.com/advisories/29446

[Vendor Advisory] http://www.mandriva.com/security/advisories?name=MDVSA-2008:073

[Exploit] http://www.securityfocus.com/bid/26902

Scores

EPSS 0.1896

EPSS Percentile 95.3%

Details

CWE

CWE-119

Status published

Products (1)

net_dns/net_dns 0.60 build_654

Published Dec 20, 2007

Tracked Since Feb 18, 2026