FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

nsd -- buffer overflow vulnerability

Affected packages
nsd < 3.2.2
nsd2 < 2.3.7_1

Details

VuXML ID 37a8603d-4494-11de-bea7-000c29a67389
Discovery 2009-05-19
Entry 2009-05-19
Modified 2009-05-22

NLnet Labs:

A one-byte buffer overflow has been reported in NSD. The problem affects all versions 2.0.0 to 3.2.1. The bug allows a carefully crafted exploit to bring down your DNS server. It is highly unlikely that this one byte overflow can lead to other (system) exploits.

References

CVE Name CVE-2009-1755
URL http://www.nlnetlabs.nl/publications/NSD_vulnerability_announcement.html