Back to Database
Status published
Medium
CVE-2008-0061
MaraDNS 1.0 before 1.0.41, 1.2 before 1.2.12.08, and 1.3 before...
Vulnerability Description
MaraDNS 1.0 before 1.0.41, 1.2 before 1.2.12.08, and 1.3 before 1.3.07.04 allows remote attackers to cause a denial of service via a crafted DNS packet that prevents an authoritative name (CNAME) record from resolving, aka "improper rotation of resource records."
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-0061
Credits & Attribution
No credits recorded in the NVD database.
References
- http://www.vupen.com/english/advisories/2008/0026
- http://secunia.com/advisories/28334
- http://secunia.com/advisories/28329
- http://secunia.com/advisories/28650
- http://security.gentoo.org/glsa/glsa-200801-16.xml
- http://bugs.gentoo.org/show_bug.cgi?id=204351
- http://www.debian.org/security/2008/dsa-1445
- http://maradns.blogspot.com/2007/08/maradns-update-all-versions.html
- http://www.maradns.org/changelog.html
- http://www.securityfocus.com/bid/27124
More from maradns
View All →CVE-2022-30256
An issue was discovered in MaraDNS Deadwood through 3.5.0021 that...
Unknown
0
CVE-2012-1570
The resolver in MaraDNS before 1.3.0.7.15 and 1.4.x before 1.4.12...
Medium
4.3
CVE-2012-0024
MaraDNS before 1.3.07.12 and 1.4.x before 1.4.08 computes hash values...
High
7.8
CVE-2011-5056
The authoritative server in MaraDNS through 2.0.04 computes hash values...
Low
2.1
CVE-2011-5055
MaraDNS 1.3.07.12 and 1.4.08 computes hash values for DNS data...
Medium
5
Affected Vendor
maradns
View all reports →Affected Software
maradns
Vulnerable Versions:
1.0.00, 1.0.01, 1.0.02, 1.0.03, 1.0.04, 1.0.05, 1.0.06, 1.0.07, 1.0.08, 1.0.09, 1.0.10, 1.0.11, 1.0.12, 1.0.13, 1.0.14, 1.0.15, 1.0.16, 1.0.17, 1.0.18, 1.0.19, 1.0.20, 1.0.21, 1.0.22, 1.0.23, 1.0.24, 1.0.25, 1.0.26, 1.0.27, 1.0.28, 1.0.29, 1.0.30, 1.0.31, 1.0.32, 1.0.33, 1.0.34, 1.0.35, 1.0.36, 1.0.37, 1.0.38, 1.0.39, 1.2.12.01, 1.2.12.02, 1.2.12.03, 1.2.12.04, 1.2.12.05, 1.2.12.06, 1.2.12.07, 1.3.01, 1.3.02, 1.3.03, 1.3.04, 1.3.05, 1.3.06, 1.3.07, 1.3.07.01, 1.3.07.02, 1.3.07.03
Timeline
Official Publish:
January 3rd, 2008
Last Modified:
August 7th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.