MaraDNS Hostname Null Pointer Dereference Remote Denial of Service Vulnerability

Bugtraq ID:	40745
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 10 2010 12:00AM
Updated:	Jun 10 2010 12:00AM
Credit:	Reported by the vendor
Vulnerable:	MaraDNS MaraDNS 1.3.7 .04 MaraDNS MaraDNS 1.3.5 MaraDNS MaraDNS 1.3.4 MaraDNS MaraDNS 1.2.12 .08 MaraDNS MaraDNS 1.2.12 .06 MaraDNS MaraDNS 1.2.12 .05 MaraDNS MaraDNS 1.2.12 .04 MaraDNS MaraDNS 1.2.12 .03 MaraDNS MaraDNS 1.0.41 MaraDNS MaraDNS 1.0.27 MaraDNS MaraDNS 1.0.23
Not Vulnerable:	MaraDNS MaraDNS 1.4.03 MaraDNS MaraDNS 1.3.07.10

MaraDNS Hostname Null Pointer Dereference Remote Denial of Service Vulnerability

MaraDNS is prone to a remote denial-of-service vulnerability due to a NULL-pointer dereference condition.

Successfully exploiting this issue allows remote attackers to crash affected servers, which will deny further service to legitimate users.

Versions prior to MaraDNS 1.4.03 and 1.3.07.10 are vulnerable.

MaraDNS Hostname Null Pointer Dereference Remote Denial of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

MaraDNS Hostname Null Pointer Dereference Remote Denial of Service Vulnerability

Solution:
Please see the referenced advisories for information on obtaining and applying the appropriate updates.

MaraDNS Hostname Null Pointer Dereference Remote Denial of Service Vulnerability

References:

• MaraDNS 1.4.03 and 1.3.07.10 Released (MaraDNS)
  
• MaraDNS Homepage (MaraDNS)