oval:org.mitre.oval:def:13695

Definition Id: oval:org.mitre.oval:def:13695
 
Oval ID: oval:org.mitre.oval:def:13695
Title: DSA-1831-1 djbdns -- programming error
Description: Matthew Dempsky discovered that Daniel J. Bernstein's djbdns, a Domain Name System server, does not constrain offsets in the required manner, which allows remote attackers with control over a third-party subdomain served by tinydns and axfrdns, to trigger DNS responses containing arbitrary records via crafted zone data for this subdomain. The old stable distribution does not contain djbdns. For the stable distribution, this problem has been fixed in version 1.05-4+lenny1. For the unstable distribution, this problem has been fixed in version 1.05-5. We recommend that you upgrade your djbdns package.
Family: unix Class: patch
Reference(s): DSA-1831-1
CVE-2009-0858
Version: 5
Platform(s): Debian GNU/Linux 5.0
Product(s): djbdns
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:6513
 
Oval ID: oval:org.mitre.oval:def:6513
Title: Debian GNU/Linux 5.0 is installed
Description: Debian GNU/Linux 5.0 (lenny) is installed
Family: unix Class: inventory
Reference(s): cpe:/o:debian:debian_gnu/linux:5.0
Version: 7
Platform(s): Debian GNU/Linux 5.0
Product(s):
Definition Synopsis:
Referenced By:
oval:org.mitre.oval:def:13695