CVE-2004-0789 - CVE House
Back to Database
Status published Medium CVE-2004-0789

Multiple implementations of the DNS protocol, including (1) Poslib 1.0.2-1...

Vulnerability Description

Multiple implementations of the DNS protocol, including (1) Poslib 1.0.2-1 and earlier as used by Posadis, (2) Axis Network products before firmware 3.13, and (3) Men & Mice Suite 2.2x before 2.2.3 and 3.5.x before 3.5.2, allow remote attackers to cause a denial of service (CPU and network bandwidth consumption) by triggering a communications loop via (a) DNS query packets with localhost as a spoofed source address, or (b) a response packet that triggers a response packet.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2004-0789

Credits & Attribution

No credits recorded in the NVD database.

References

More from delegate

View All →
CVE-2006-2072
Multiple unspecified vulnerabilities in DeleGate 9.x before 9.0.6 and 8.x...
Medium 5
CVE-2005-0861
Multiple buffer overflows in DeleGate before 8.11.1 may allow attackers...
High 7.5
CVE-2005-0036
The DNS implementation in DeleGate 8.10.2 and earlier allows remote...
Medium 5
CVE-2004-2003
Buffer overflow in the ssl_prcert function in the SSLway filter...
High 7.5
CVE-2002-1781
Multiple buffer overflows in DeleGate 7.7.0 through 7.8.1 allow remote...
High 7.5

Affected Vendor

Affected Software

delegate, dnrd, mydns, maradns, pliant dns server, posadis, wingate, raidendnsd, 2100 network camera, 2110 network camera, 2120 network camera, 2400 video server, 2401 video server, 2420 network camera, 2460 network dvr
Vulnerable Versions:
7.7.0, 7.7.1, 7.8.0, 7.8.1, 7.8.2, 7.9.11, 8.3.3, 8.3.4, 8.4.0, 8.5.0, 8.9, 8.9.1, 8.9.2, 8.9.3, 8.9.4, 8.9.5, 1.0, 1.1, 1.2, 1.3, 1.4, 2.0, 2.1, 2.2, 2.3, 2.4, 2.5, 2.6, 2.7, 2.8, 2.9, 2.10, 0.6, 0.7, 0.8, 0.9, 0.10.0, 0.5.28, 0.5.29, 0.5.30, 0.5.31, 0.8.05, 0.50.4, 0.50.5, 0.50.6, 0.50.7, 0.50.8, 0.50.9, 0.60.0, 0.60.1, m5pre1, m5pre2, 3.0, 4.0.1, 4.1_beta_a, 6.0, 6.0.1_build_993, 6.0.1_build_995, 2.01, 2.02, 2.03, 2.12, 2.30, 2.31, 2.32, 2.33, 2.34, 2.40, 2.41, 3.11, 3.12

Timeline

Official Publish: September 1st, 2005
Last Modified: August 8th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.