[Dshield] Juniper Networks JUNOSe DNS Response HandlingVulnerability

Chris Wright dshield at yaps4u.net
Wed Apr 26 20:01:50 GMT 2006


Also see http://isc.sans.org/diary.php?n&storyid=1290 as reported by the
handler on duty early this morning...

There are links to all known impacts on this 'vulnerability' (Not just
JUNOSe)

Regards

Chris 

> -----Original Message-----
> From: list-bounces at lists.dshield.org 
> [mailto:list-bounces at lists.dshield.org] On Behalf Of Fergie
> Sent: 26 April 2006 16:30
> To: list at lists.dshield.org
> Subject: [Dshield] Juniper Networks JUNOSe DNS Response 
> HandlingVulnerability
> 
> Via Secunia.
> 
> [snip]
> 
> Description:
> A vulnerability with unknown impact has been reported in JUNOSe.
> 
> The vulnerability is caused due to unspecified errors within 
> the handling of DNS responses.
> 
> Solution:
> The vulnerability has been fixed in JUNOSe versions 
> 5-3-5p0-2, 6-0-3p0-6, 6-0-4, 6-1-3p0-1, 7-0-1p0-7, 7-0-2, 
> 7-1-0p0-1, and 7-1-1.
> 
> Provided and/or discovered by:
> Reported by vendor based on DNS Test Tool created by Oulu 
> University Secure Programming Group.
> 
> Original Advisory:
> NISCC:
> http://www.niscc.gov.uk/niscc/docs/re-20060425-00312.pdf?lang=en
> 
> [snip]
> 
> Here:
> http://secunia.com/advisories/19822/
> 
> - ferg
> 
> 
> --
> "Fergie", a.k.a. Paul Ferguson
>  Engineering Architecture for the Internet  
> fergdawg at netzero.net or fergdawg at sbcglobal.net  ferg's tech 
> blog: http://fergdawg.blogspot.com/
> 
> 
> _______________________________________________
> Fun and Misc security discussion for OT posts.
> https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
> Note: funsec is a public and open mailing list.
> 
> 
> _________________________________________
> 
> SANSFIRE 2006 - Meet ISC Handlers in Person - Learn about the 
> latest in Information Security from the best instructors in the world.
> 
> http://www.sans.org/sansfire006
> 
> Internet Storm Center Webcasts: http://www.sans.org/webcasts 
> . Every Wednesday after patch-tuesday.
> _______________________________________________
> send all posts to list at lists.dshield.org To change your 
> subscription options (or unsubscribe), see: 
> http://www.dshield.org/mailman/listinfo/list
> 



More information about the list mailing list