CVE-2003-1441

Published: Dec 31, 2003Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Posadis 0.50.4 through 0.50.8 allows remote attackers to cause a denial of service (crash) via a DNS message without a question section, which triggers null dereference.

Affected (5)

Products: Posadis: Posadis

Posadis

1 product

Posadis

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Posadis Posadis	Version 0.50.4
Posadis Posadis	Version 0.50.5
Posadis Posadis	Version 0.50.6
Posadis Posadis	Version 0.50.7
Posadis Posadis	Version 0.50.8

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (10)

http://secunia.com/advisories/8018

Source: cve@mitre.org

http://www.osvdb.org/3522

Source: cve@mitre.org

http://www.posadis.org/advisories/pos_adv_003.txt

Source: cve@mitre.org

http://www.securityfocus.com/bid/6799

Source: cve@mitre.org

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/11285

Source: cve@mitre.org

http://secunia.com/advisories/8018