JUNOSe DNS Response Bug Lets Remote Users Deny Service
|
|
SecurityTracker Alert ID: 1015992
|
|
SecurityTracker URL: http://securitytracker.com/id?1015992
|
|
CVE Reference: GENERIC-MAP-NOMATCH
(Links to External Site)
|
Date: Apr 26 2006
|
Impact: Denial of service via network
|
Fix Available: Yes
Vendor Confirmed: Yes
|
Version(s): E-series routers
|
Description: A vulnerability was reported in JUNOSe. A remote user can cause denial of service conditions.
A remote DNS server can return specially crafted data in response to a DNS query to trigger a flaw in the DNSclient code.
The
'c09-dns-response' test can trigger this flaw.
The specific type of denial of service impact was not specified.
JUNOS and
ScreenOS are not affected.
|
Impact: A remote user can cause denial of service conditions.
|
Solution: The vendor has issued fixed versions of JUNOSe: 5-3-5p0-2, 6-0-3p0-6, 6-0-4, 6-1-3p0-1, 7-0-1p0-7, 7-0-2, 7-1-0p0-1, and 7-1-1 and later releases.
|
Vendor URL: www.juniper.net/ (Links to External Site)
|
Cause: Exception handling error
|
|
Message History:
None.
|
Source Message Contents
|
|
|
[Original Message Not Available for Viewing]
|
|
