CVE-2007-6341

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 9.5%

from disclosure to weapon0 days

Published on NVDDec 20

1st PoCDec 17

exploitation probability

9.5%top 5% of all CVEs

observed exploitation

nono source reports it

1 public exploit(s)

Net/DNS/RR/A.pm in Net::DNS 0.60 build 654, as used in packages such as SpamAssassin and OTRS, allows remote attackers to cause a denial of service (program "croak") via a crafted DNS response.

Affected products

n/a · n/a

public PoCs found — 1✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/30895

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://search.cpan.org/src/OLAF/Net-DNS-0.63/Changes http://secunia.com/advisories/29343 http://secunia.com/advisories/29354 http://secunia.com/advisories/29446 http://secunia.com/advisories/29555 https://rt.cpan.org/Public/Bug/Display.html?id=30316 https://usn.ubuntu.com/594-1/http://www.debian.org/security/2008/dsa-1515 http://www.mandriva.com/security/advisories?name=MDVSA-2008:073 http://www.securiteam.com/unixfocus/6I00E0UKKQ.html http://www.securityfocus.com/bid/26902 http://www.securitytracker.com/id?1019104