CVE-2007-2188

CVE-2007-2188

EPSS 2.4%

eXtremail 2.1.1 and earlier does not verify the ID field (aka transaction id) in DNS responses, which makes it easier for remote attackers to conduct DNS spoofing.

Produtos afetados

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

http://archives.neohapsis.com/archives/fulldisclosure/2007-04/0569.html http://osvdb.org/35584 http://www.securityfocus.com/bid/23577