CVE-2004-0789: Medium severity Delegate DeleGate vulnerability
Multiple implementations of the DNS protocol, including (1) Poslib 1.0.2-1 and earlier as used by Posadis, (2) Axis Network products before firmware 3.13, and (3) Men & Mice Suite 2.2x before 2.2.3 and 3.5.x before 3.5.2, allow remote attackers to cause a denial of service (CPU and network bandwidth consumption) by triggering a communications loop via (a) DNS query packets with localhost as a spoofed source address, or (b) a response packet that triggers a response packet.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-0789?
CVE-2004-0789 is classified as a high severity vulnerability due to its potential to cause denial of service.
How do I fix CVE-2004-0789?
To fix CVE-2004-0789, you should update the affected DNS implementations to their latest versions that have patched this vulnerability.
What systems are affected by CVE-2004-0789?
CVE-2004-0789 affects multiple DNS implementations, including Poslib, Axis Network products, and Men & Mice Suite, among others.
Who can exploit CVE-2004-0789?
Remote attackers can exploit CVE-2004-0789 to disrupt DNS services, resulting in denial of service conditions.
What are the symptoms of an exploit of CVE-2004-0789?
Exploitation of CVE-2004-0789 may lead to high CPU usage and significant network bandwidth consumption, making services unavailable.