CVE-2004-0789

Multiple implementations of the DNS protocol, including (1) Poslib 1.0.2-1 and earlier as used by Posadis, (2) Axis Network products before firmware 3.13, and (3) Men & Mice Suite 2.2x before 2.2.3 and 3.5.x before 3.5.2, allow remote attackers to cause a denial of service (CPU and network bandwidth consumption) by triggering a communications loop via (a) DNS query packets with localhost as a spoofed source address, or (b) a response packet that triggers a response packet.

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS

2.77% chance of exploitation in the next 30 days, 85th percentile

Published

2005-09-01

Updated

2024-08-08

Proof-of-concept exploits (1)

• HimmeL-Byte/CVE-2004-0789-DDOS1★ · 2025-05-06

References

• CVE Record
• NVD entry

Related

• CVE-2024-41570
• CVE-2004-0777
• CVE-2004-0790
• CVE-2004-0771
• CVE-2004-0791
• CVE-2004-0769