MaraDNS Hash Collision CVE-2011-5056 Local Denial of Service Vulnerability

Bugtraq ID:	67002
Class:	Input Validation Error
CVE:	CVE-2011-5056
Remote:	No
Local:	Yes
Published:	Feb 12 2012 12:00AM
Updated:	Feb 12 2012 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	MaraDNS MaraDNS 1.4.14 MaraDNS MaraDNS 1.4.13 MaraDNS MaraDNS 1.4.9 MaraDNS MaraDNS 1.4.6 MaraDNS MaraDNS 1.4.5 MaraDNS MaraDNS 1.3.5 MaraDNS MaraDNS 1.3.4 MaraDNS MaraDNS 1.0.41 MaraDNS MaraDNS 1.0.27 MaraDNS MaraDNS 1.0.23 MaraDNS MaraDNS 0.8.99 MaraDNS MaraDNS 0.5.31 MaraDNS MaraDNS 0.5.30 MaraDNS MaraDNS 0.5.29 MaraDNS MaraDNS 0.5.28 MaraDNS MaraDNS 2.0.04 MaraDNS MaraDNS 2.0.02 MaraDNS MaraDNS 1.4.12 MaraDNS MaraDNS 1.4.03 MaraDNS MaraDNS 1.3.07.15 MaraDNS MaraDNS 1.3.07.13 MaraDNS MaraDNS 1.3.07.11 MaraDNS MaraDNS 1.3.07.10
Not Vulnerable:	MaraDNS MaraDNS 2.0.05

MaraDNS Hash Collision CVE-2011-5056 Local Denial of Service Vulnerability

MaraDNS is prone to a local denial-of-service vulnerability.

A local attacker can exploit this issue to crash the affected application, denying service to legitimate users.

Versions prior to MaraDNS 2.0.05 are vulnerable.

MaraDNS Hash Collision CVE-2011-5056 Local Denial of Service Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

MaraDNS Hash Collision CVE-2011-5056 Local Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

MaraDNS Hash Collision CVE-2011-5056 Local Denial of Service Vulnerability

References:

• MaraDNS 2.0.x < 2.0.05 Hash Collision Zone File Record Local DoS (MaraDNS)
  
• MaraDNS Homepage (MaraDNS)
  
• MaraDNS�?? security (MaraDNS)