Delegate proxy 5.9.3 and earlier creates files and directories in the DGROOT with world-writable permissions.
The DNS implementation in DeleGate 8.10.2 and earlier allows remote attackers to cause a denial of service via a compressed DNS packet with a label length byte with an incorrect offset, which could trigger an infinite loop.