vulnwire
5.0med

CVE-2007-63411 exploit

Net/DNS/RR/A.pm in Net::DNS 0.60 build 654, as used in packages such as SpamAssassin and OTRS, allows remote attackers to cause a denial of…

Published 18 y ago · modified 4 mo ago · JSON

CVSS
5.0
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
9.5%
percentile 95%
Public exploits
1
Exploit-DB

Net/DNS/RR/A.pm in Net::DNS 0.60 build 654, as used in packages such as SpamAssassin and OTRS, allows remote attackers to cause a denial of service (program "croak") via a crafted DNS response.

Exploit prediction (EPSS)

9.55% probability of exploitation in the next 30 days, higher than 95% of all scored CVEs.

Exploits and detections

  • EDB-30895 Perl Net::DNS 0.48/0.59/0.60 - DNS Response Remote Denial of Service · dos · 2007-12-17

CVSS scores

Assigned byVersionScoreVector
NVD2.05.0AV:N/AC:L/Au:N/C:N/I:N/A:P

Classification

Weakness
  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

References

  • secunia.com /advisories/29354 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • securitytracker.com /id?1019104 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • search.cpan.org /src/OLAF/Net-DNS-0.63/Changes · x_refsource_CONFIRM, x_transferred
  • secunia.com /advisories/29555 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • debian.org /security/2008/dsa-1515 · vendor-advisory, x_refsource_DEBIAN, x_transferred
  • rt.cpan.org /Public/Bug/Display.html?id=30316 · x_refsource_MISC, x_transferred
  • securiteam.com /unixfocus/6I00E0UKKQ.html · x_refsource_MISC, x_transferred
  • secunia.com /advisories/29343 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • usn.ubuntu.com /594-1/ · vendor-advisory, x_refsource_UBUNTU, x_transferred
  • secunia.com /advisories/29446 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • mandriva.com /security/advisories?name=MDVSA-2008:073 · vendor-advisory, x_refsource_MANDRIVA, x_transferred
  • securityfocus.com /bid/26902 · vdb-entry, x_refsource_BID, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.