The DNS module in Arkoon FAST360 UTM appliances 3.0 up to 3.0/29, 3.1 through 3.3, and 4.0 allows remote attackers to cause a denial of service (reboot) via a malformed DNS message, as demonstrated by the PROTOS DNS testing suite.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Fast360 | Arkoon | 3.0 (including) | 3.0 (including) |
| Fast360 | Arkoon | 3.0_29 (including) | 3.0_29 (including) |
| Fast360 | Arkoon | 3.1 (including) | 3.1 (including) |
| Fast360 | Arkoon | 3.2 (including) | 3.2 (including) |
| Fast360 | Arkoon | 3.3 (including) | 3.3 (including) |
| Fast360 | Arkoon | 4.0_1 (including) | 4.0_1 (including) |
References
- http://secunia.com/advisories/20618
- http://www.arkoon.fr/upload/alertes/33AK-2006-02-EN-1.0_FAST_DNS_DOS.pdf
- http://www.ee.oulu.fi/research/ouspg/protos/testing/c09/dns/index.html
- http://www.vupen.com/english/advisories/2006/2217
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27004
- http://secunia.com/advisories/20618
- http://www.arkoon.fr/upload/alertes/33AK-2006-02-EN-1.0_FAST_DNS_DOS.pdf
- http://www.ee.oulu.fi/research/ouspg/protos/testing/c09/dns/index.html
- http://www.vupen.com/english/advisories/2006/2217
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27004