CVE-2008-3208

Published: Jul 18, 2008Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Simple DNS Plus 4.1, 5.0, and possibly other versions before 5.1.101 allows remote attackers to cause a denial of service via multiple DNS reply packets.

Affected (3)

Products: Simpledns: Simple Dns Plus

Simpledns

1 product

Simple Dns Plus

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Simpledns Simple Dns Plus	Up to 5.1.101
Simpledns Simple Dns Plus	Version 4.1
Simpledns Simple Dns Plus	Version 5.0

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (14)

http://securityreason.com/securityalert/4011

Source: cve@mitre.org

http://www.blackhat.org.il/index.php/simple-dns-plus-5041-remote-denial-of-service-exploit/

Source: cve@mitre.org

Exploit

http://www.securityfocus.com/archive/1/494304/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/30207

Source: cve@mitre.org

http://www.simpledns.com/kb.aspx?kbid=1246

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/43767

Source: cve@mitre.org

https://www.exploit-db.com/exploits/6059

Source: cve@mitre.org

http://securityreason.com/securityalert/4011