Mandriva- Advisories MDKSA-2007:146: Updated perl-Net-DNS packages fix multiple vulnerabilities

[Mandriva]

Advisories MDKSA-2007:146: Updated perl-Net-DNS packages fix multiple vulnerabilities
A flaw was discovered in the perl Net:NS module in the way it
generated the ID field in a DNS query. Because it is so predictable,
a remote attacker could exploit this to return invalid DNS data
(CVE-2007-3377).

A denial of service vulnerability was found in how Net:NS parsed
certain DNS requests. A malformed response to a DNS request could
cause the application using Net:NS to crash or stop responding
(CVE-2007-3409).

The updated packages have been patched to prevent these issues.
http://mandrivausers.org/index.php?showtopic=42825
Array
Fri, 13 Jul 2007 02:22:19 +0000