SheerDNS CNAME Buffer Overflow Vulnerability
BID:7335
Info
SheerDNS CNAME Buffer Overflow Vulnerability
| Bugtraq ID: | 7335 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Apr 13 2003 12:00AM |
| Updated: | Apr 13 2003 12:00AM |
| Credit: | Discovery of this issue is credited to Jedi/Sector One <[email protected]>. |
| Vulnerable: |
SheerDNS SheerDNS 1.0 |
| Not Vulnerable: |
SheerDNS SheerDNS 1.0.1 |
Discussion
SheerDNS CNAME Buffer Overflow Vulnerability
SheerDNS is prone to a buffer overflow when constructing responses to CNAME queries. This is due to insufficient bounds checking of lookup information which is fetched from local files. If an attacker can influence the contents of these files, then it will be possible to trigger this condition to corrupt adjacent regions of memory with malicious data. This could lead to a denial of service or execution of malicious instructions.
This issue was discovered in SheerDNS version 1.0.0, however, earlier versions may also be affected.
SheerDNS is prone to a buffer overflow when constructing responses to CNAME queries. This is due to insufficient bounds checking of lookup information which is fetched from local files. If an attacker can influence the contents of these files, then it will be possible to trigger this condition to corrupt adjacent regions of memory with malicious data. This could lead to a denial of service or execution of malicious instructions.
This issue was discovered in SheerDNS version 1.0.0, however, earlier versions may also be affected.
Exploit / POC
SheerDNS CNAME Buffer Overflow Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
SheerDNS CNAME Buffer Overflow Vulnerability
Solution:
This issue has been addressed in SheerDNS 1.0.1.
SheerDNS SheerDNS 1.0
Solution:
This issue has been addressed in SheerDNS 1.0.1.
SheerDNS SheerDNS 1.0
-
SheerDNS sheerdns-1.0.1.tar.gz
http://threading.2038bug.com/sheerdns/sheerdns-1.0.1.tar.gz
References
SheerDNS CNAME Buffer Overflow Vulnerability
References:
References:
- SheerDNS Homepage (SheerDNS)
- Multiple vulnerabilities in SheerDNS (Jedi/Sector One