Approved changes feed: RSS · Atom

cpe:2.3:a:d.j.bernstein:djbdns:1.05:*:*:*:*:*:*:*

part: a version: 1.05 update: *

VendorD.J.Bernstein (081a78e8-8dc1-58c2-a378-571bec925e4e)
ProductDjbdns (2d595da1-997a-5231-97d6-5d64f30c707d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/abh/djbdns purl2cpe 2026-06-01 10:15:44.019862

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-1191 vulnerable 2026-06-08 05:00:48.189438 Details available
The resolver in dnscache in Daniel J. Bernstein djbdns 1.05 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack.
Published: 2012-02-17T22:00:00.000Z
Updated: 2024-09-16T17:23:51.903Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-4392 vulnerable 2026-06-08 04:50:38.786616 Details available
dnscache in Daniel J. Bernstein djbdns 1.05 does not prevent simultaneous identical outbound DNS queries, which makes it easier for remote attackers to spoof DNS responses, as demonstrated by a spoofed A record in the Additional section of a response to a Start of Authority (SOA) query.
Published: 2009-02-19T16:00:00.000Z
Updated: 2024-08-07T10:17:09.645Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.