Info

Disclosure

Jan 18, 2006

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

MyDNS contains a flaw that may allow a remote denial of service. The issue is triggered when packets with malformed DNS queries are sent to the service, and will result in loss of availability for the service.

Classification

Location: Remote / Network Access
Attack Type: Denial of Service
Impact: Loss of Availability
Exploit: Exploit Unknown
Disclosure: Vendor Verified

Solution

Upgrade to version 1.1.0 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

Don Moore

MyDNS

1.0.0

References

Security Tracker: 1015521
Bugtraq ID: 16431
Secunia Advisory ID: 18532 18641 18653
CVE ID: 2006-0351 (see also: NVD)
VUPEN Advisory: ADV-2006-0256
Vendor Specific News/Changelog Entry: http://mydns.bboy.net/download/changelog.html
Other Advisory URL: http://security.gentoo.org/glsa/glsa-200601-16.xml
Vendor Specific Advisory URL: http://www.debian.org/security/2006/dsa-963

Credit

Don Moore -

Direct URL: http://osvdb.org/22636