01 September 2009, 09:46
Vulnerabilities in DNS Proxy Dnsmasq
The release of version 2.50 of the lightweight DNS proxy, Dnsmasq, closes two vulnerabilities which could allow an attacker to inject and execute arbitrary code on systems or routers running the service or stage a denial of service. Dnsmasq is used on routers running the router distributions OpenWRT or DD-WRT as it is ideal for providing DNS services for small networks.
However, the holes only occur in an unusual configuration. The administrator has to enable the TFTP service, explicitly using the --enable-tfp switch. By default, this service is not enabled on OpenWRT or DD-WRT routers.
See also:
(djwm)
Print Version | Send by email
| Permalink: http://h-online.com/-743193
![Kernel Log: Coming in 3.10 (Part 3) [--] Infrastructure](/imgs/43/1/0/4/2/6/7/2/comingin310_4_kicker-4977194bfb0de0d7.png)
![Kernel Log: Coming in 3.10 (Part 3) [--] Infrastructure](/imgs/43/1/0/4/2/3/2/3/comingin310_3_kicker-151cd7b9e9660f05.png)
