CVE-2007-3116 - Memory leak in server/MaraDNS.c in MaraDNS 1.2.12.06 and 1.3.05 allows remote attackers to cause a d

CVE-2007-3116

Summary

Memory leak in server/MaraDNS.c in MaraDNS 1.2.12.06 and 1.3.05 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors, a different set of affected versions than CVE-2007-3114 and CVE-2007-3115.

References

http://maradns.blogspot.com/search/label/MaraDNS
http://osvdb.org/37016
http://secunia.com/advisories/25767
http://www.debian.org/security/2007/dsa-1319

Vulnerable Configurations

cpe:2.3:a:maradns:maradns:1.2.12.06:*:*:*:*:*:*:*
cpe:2.3:a:maradns:maradns:1.2.12.06:*:*:*:*:*:*:*
cpe:2.3:a:maradns:maradns:1.3.05:*:*:*:*:*:*:*
cpe:2.3:a:maradns:maradns:1.3.05:*:*:*:*:*:*:*

CVSS

Base:	5.0 (as of 31-10-2012 - 02:37)
Impact:
Exploitability:

CWE

CWE-399

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
NONE	NONE	PARTIAL

cvss-vector via4

AV:N/AC:L/Au:N/C:N/I:N/A:P

refmap via4

confirm	http://maradns.blogspot.com/search/label/MaraDNS
debian	DSA-1319
osvdb	37016
secunia	25767

Last major update

31-10-2012 - 02:37

Published

07-06-2007 - 21:30

Last modified

31-10-2012 - 02:37