CVE-2002-0140

Published: Mar 25, 2002Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Domain Name Relay Daemon (dnrd) 2.10 and earlier allows remote malicious DNS sites to cause a denial of service and possibly execute arbitrary code via a long or malformed DNS reply, which is not handled properly by parse_query, get_objectname, and possibly other functions.

Affected (16)

Products: Dnrd: Dnrd

Dnrd

1 product

Dnrd

Configuration A

16 vulnerable

Vulnerable Software	Affected Versions
Dnrd Dnrd	Version 1.0
Dnrd Dnrd	Version 1.1
Dnrd Dnrd	Version 1.2
Dnrd Dnrd	Version 1.3
Dnrd Dnrd	Version 1.4
Dnrd Dnrd	Version 2.0
Dnrd Dnrd	Version 2.10
Dnrd Dnrd	Version 2.1
Dnrd Dnrd	Version 2.2
Dnrd Dnrd	Version 2.3
Dnrd Dnrd	Version 2.4
Dnrd Dnrd	Version 2.5
Dnrd Dnrd	Version 2.6
Dnrd Dnrd	Version 2.7
Dnrd Dnrd	Version 2.8
Dnrd Dnrd	Version 2.9

References (6)

http://online.securityfocus.com/archive/1/251619

Source: cve@mitre.org

Vendor Advisory

http://www.iss.net/security_center/static/7957.php

Source: cve@mitre.org

http://www.securityfocus.com/bid/3928

Source: cve@mitre.org

http://online.securityfocus.com/archive/1/251619

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.iss.net/security_center/static/7957.php

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/3928

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.