Multiple FITELnet Products Unspecified DNS Handling Vulnerabilities

Bugtraq ID:	17710
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Apr 26 2006 12:00AM
Updated:	Apr 27 2006 05:21PM
Credit:	These issues were discovered by the PROTOS DNS Test Suite, which was developed by the Oulu University Secure Programming Group (OUSPG).
Vulnerable:	Furukawa Electric Co. MUCHO-EV/PK 0 Furukawa Electric Co. FITELnet-F80 0 Furukawa Electric Co. FITELnet-F40 0 Furukawa Electric Co. FITELnet-F3000 0 Furukawa Electric Co. FITELnet-F120 0 Furukawa Electric Co. FITELnet-F1000 0 Furukawa Electric Co. FITELnet-F100 0 Furukawa Electric Co. FITELnet-E30 0 Furukawa Electric Co. FITELnet-E20 0
Not Vulnerable:

Multiple FITELnet Products Unspecified DNS Handling Vulnerabilities

Multiple FITELnet products are prone to multiple unspecified DNS vulnerabilities.

Consequences of these vulnerabilities are currently unknown, but remote code execution or denial-of-service attacks may be possible.

This BID will be updated as further information is disclosed.

Multiple FITELnet Products Unspecified DNS Handling Vulnerabilities

The PROTOS DNS Test Suite, which was developed by the Oulu University Secure Programming Group (OUSPG), may be used to trigger this issue.

Multiple FITELnet Products Unspecified DNS Handling Vulnerabilities

Solution:

The vendor has released an advisory for this issue, but fixes are not currently available. Please see the referenced advisory for further information.

Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]:[email protected]

Multiple FITELnet Products Unspecified DNS Handling Vulnerabilities

References:

• DNS Advisory (Furukawa Electric Co.)
  
• NISCC Vulnerability Advisory 144154/NISCC/DNS (NISCC)
  
• NISCC Vulnerability Advisory 144154/NISCC/DNS - Vulnerability Issues in Implemen (NISCC)