|
|
>> Juniper Networks JUNOSe DNS Response Handling Denial of Service Vulnerability
|
Title : Juniper Networks JUNOSe DNS Response Handling Denial of Service Vulnerability
VUPEN ID : VUPEN/ADV-2006-1526
CVE ID : CVE-2006-2074
Rated as : Moderate Risk 
Remotely Exploitable : Yes
Locally Exploitable : Yes
Release Date : 2006-04-26
|
A vulnerability has been identified in Juniper Networks JUNOSe, which could be exploited by remote attackers to cause a denial of service. This flaw is due to an error in the implementation of the Domain Name System (DNS) protocol that does not properly handle malformed response messages, which could be exploited by remote attackers to crash a vulnerable system, creating a denial of service condition. For additional information, see : VUPEN/ADV-2006-1505
Affected Products
JUNOSe versions 5.x
JUNOSe versions 6.x
JUNOSe versions 7.x
Solution
Upgrade to JUNOSe version 5-3-5p0-2, 6-0-3p0-6, 6-0-4, 6-1-3p0-1, 7-0-1p0-7, 7-0-2, 7-1-0p0-1, or 7-1-1.
References
http://www.vupen.com/english/advisories/2006/1526
http://www.niscc.gov.uk/niscc/docs/re-20060425-00312.pdf?lang=en
ChangeLog
2006-04-26 : Initial release
Vulnerability Management
Subscribe to VUPEN VNS and receive real-time alerts when new advisories or patches relevant to your systems and network configurations are available.
Feedback
If you have additional information or corrections for this security advisory please submit them via our contact form. | |
|
