LinuxSecurity.com
Share your story
The central voice for Linux and Open Source security news
Home News Topics Advisories HOWTOs Features Newsletters About Register

Welcome!
Sign up!
EnGarde Community
Login
Polls
How would you rate the importance of default settings in security?
 
Advisories
Community
Linux Events
Linux User Groups
Link to Us
Security Center
Book Reviews
Security Dictionary
Security Tips
SELinux
White Papers
Featured Blogs
Emily Ratliff: OS Security
DanWalsh LiveJournal
Security Bloggers Network
Latest Newsletters
Linux Advisory Watch: May 16th, 2008
Linux Security Week: May 13th, 2008
Subscribe
LinuxSecurity Newsletters
E-mail:
Choose Lists:
About our Newsletters
RSS Feeds
Get the LinuxSecurity news you want faster with RSS
Powered By

  
Mandriva: Updated perl-Net-DNS packages fix DoS Print E-mail
User Rating:      How can I rate this item?
Posted by Benjamin D. Thomas   
Mandrake A vulnerability in the Net::DNS perl module was found that could allow remote attackers to cause a denial of service via a crafted DNS response. The updated packages have been patched to correct this issue.
 _______________________________________________________________________
 
 Mandriva Linux Security Advisory                         MDVSA-2008:073
 http://www.mandriva.com/security/
 _______________________________________________________________________
 
 Package : perl-Net-DNS
 Date    : March 20, 2008
 Affected: 2007.0, 2007.1, 2008.0, Corporate 3.0, Corporate 4.0
 _______________________________________________________________________
 
 Problem Description:
 
 A vulnerability in the Net::DNS perl module was found that could
 allow remote attackers to cause a denial of service via a crafted
 DNS response.
 
 The updated packages have been patched to correct this issue.
 _______________________________________________________________________

 References:
 
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6341
 _______________________________________________________________________
 
 Updated Packages:
 
 Mandriva Linux 2007.0:
 1cf2397dcfe207d625bd24d1d7fc744a  2007.0/i586/perl-Net-DNS-0.58-1.2mdv2007.0.i586.rpm 
 434fdd9456118124117a26509c6d1674  2007.0/SRPMS/perl-Net-DNS-0.58-1.2mdv2007.0.src.rpm

 Mandriva Linux 2007.0/X86_64:
 374101d8c50675d8032c5695dfb0866f  2007.0/x86_64/perl-Net-DNS-0.58-1.2mdv2007.0.x86_64.rpm 
 434fdd9456118124117a26509c6d1674  2007.0/SRPMS/perl-Net-DNS-0.58-1.2mdv2007.0.src.rpm

 Mandriva Linux 2007.1:
 8ff35127ae1c20c0b4e4cf3734b41d78  2007.1/i586/perl-Net-DNS-0.59-1.2mdv2007.1.i586.rpm 
 0630c817a581736750b3aa3a36330442  2007.1/SRPMS/perl-Net-DNS-0.59-1.2mdv2007.1.src.rpm

 Mandriva Linux 2007.1/X86_64:
 2db71882e00490ed228d3544e73d5dfa  2007.1/x86_64/perl-Net-DNS-0.59-1.2mdv2007.1.x86_64.rpm 
 0630c817a581736750b3aa3a36330442  2007.1/SRPMS/perl-Net-DNS-0.59-1.2mdv2007.1.src.rpm

 Mandriva Linux 2008.0:
 46454d0d2ffbccc32875d38428f5dbb7  2008.0/i586/perl-Net-DNS-0.61-1.1mdv2008.0.i586.rpm 
 0dd436fba91470dbd4cc4a5371cfa909  2008.0/SRPMS/perl-Net-DNS-0.61-1.1mdv2008.0.src.rpm

 Mandriva Linux 2008.0/X86_64:
 3724958b2631242743be3d24ed463e5f  2008.0/x86_64/perl-Net-DNS-0.61-1.1mdv2008.0.x86_64.rpm 
 0dd436fba91470dbd4cc4a5371cfa909  2008.0/SRPMS/perl-Net-DNS-0.61-1.1mdv2008.0.src.rpm

 Corporate 3.0:
 34228478b5f31c0a2c9beb80de8a004b  corporate/3.0/i586/perl-Net-DNS-0.39-2.2.C30mdk.i586.rpm 
 8846ab7ae3ecf66ee93666e4551e091b  corporate/3.0/SRPMS/perl-Net-DNS-0.39-2.2.C30mdk.src.rpm

 Corporate 3.0/X86_64:
 9d62397d900754063b46a1f6a7dcae9c  corporate/3.0/x86_64/perl-Net-DNS-0.39-2.2.C30mdk.x86_64.rpm 
 8846ab7ae3ecf66ee93666e4551e091b  corporate/3.0/SRPMS/perl-Net-DNS-0.39-2.2.C30mdk.src.rpm

 Corporate 4.0:
 57bb9572548a1727cdfde07176a55fc2  corporate/4.0/i586/perl-Net-DNS-0.52-1.2.20060mlcs4.i586.rpm 
 cd1731f072ad841c1244b6e873226422  corporate/4.0/SRPMS/perl-Net-DNS-0.52-1.2.20060mlcs4.src.rpm

 Corporate 4.0/X86_64:
 454f468cd925c1fccdf20751ac884dd9  corporate/4.0/x86_64/perl-Net-DNS-0.52-1.2.20060mlcs4.x86_64.rpm 
 cd1731f072ad841c1244b6e873226422  corporate/4.0/SRPMS/perl-Net-DNS-0.52-1.2.20060mlcs4.src.rpm
 _______________________________________________________________________

 To upgrade automatically use MandrivaUpdate or urpmi.  The verification
 of md5 checksums and GPG signatures is performed automatically for you.

 All packages are signed by Mandriva for security.  You can obtain the
 GPG public key of the Mandriva Security Team by executing:

  gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

 You can view other update advisories for Mandriva Linux at:

  http://www.mandriva.com/security/advisories

 If you want to report vulnerabilities, please contact

  security_(at)_mandriva.com
 _______________________________________________________________________

 Type Bits/KeyID     Date       User ID
 pub  1024D/22458A98 2000-07-10 Mandriva Security Team
  
 
< Prev   Next >
    
Partner:

 

Latest Features
Review: The Book of Wireless
April 2008 Open Source Tool of the Month: sudo
Open Source Tool of March: ZoneMinder
Meet the Anti-Nmap: PSAD
Open Source Tool of February: Nmap!
HowTo: Secure your Ubuntu Apache Web Server
SSH: Best Practices
Yesterday's Edition
Strong passwords no panacea as SSH Brute-Force Attacks Rise
Tools circulate that crack Debian, Ubuntu keys

QuickLinks: Comunity , HOWTOs , Blogs , Features , Book Reviews , Networking ,
  Security Projects ,   Latest News ,  Newsletters ,  SELinux ,  Privacy ,  Home,
 Hardening ,   About Us,   Advertise,   Legal Notice,   RSS,   Guardian Digital

(c)Copyright 2008 Guardian Digital, Inc. All rights reserved.