parse/Csv2_parse.c in MaraDNS 1.3.03, and other versions before 1.4.03, does not properly handle hostnames that do not end in a "." (dot) character, which allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted csv2 zone file.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2010-06-25 11:30
Updated : 2010-06-27 21:00
NVD link : CVE-2010-2444
Mitre link : CVE-2010-2444
JSON object : View
CWE
Products Affected
maradns
- maradns