Summary
The remote host is missing an update to maradns
announced via advisory DSA 1445-1.
Solution
https://secure1.securityspace.com/smysecure/catid.html?in=DSA%201445-1
Insight
Michael Krieger and Sam Trenholme discovered a programming error in MaraDNS, a simple security-aware Domain Name Service server, which might to denial of service through malformed DNS packets.
For the stable distribution (etch), this problem has been fixed in version 1.2.12.04-1etch2.
For the old stable distribution (sarge), this problem has been fixed in version 1.0.27-2.
For the unstable distribution (sid), this problem has been fixed in version 1.2.12.08-1.
We recommend that you upgrade your maradns package.
Severity
Classification
-
CVE CVE-2008-0061 -
CVSS Base Score: 5.0
AV:N/AC:L/Au:N/C:N/I:N/A:P
Related Vulnerabilities