Misinterpretation of special domain name characters in dproxy-nexgen (aka dproxy nexgen) leads to cache poisoning because domain names and their associated IP addresses are cached in their misinterpreted form.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Dproxy-nexgen | Dproxy-nexgen_project | - (including) | - (including) |
References
- https://sourceforge.net/projects/dproxy/
- https://www.openwall.com/lists/oss-security/2022/08/14/3
- https://www.usenix.org/conference/usenixsecurity21/presentation/jeitner
- https://www.usenix.org/conference/usenixsecurity22/presentation/jeitner
- https://sourceforge.net/projects/dproxy/
- https://www.openwall.com/lists/oss-security/2022/08/14/3
- https://www.usenix.org/conference/usenixsecurity21/presentation/jeitner
- https://www.usenix.org/conference/usenixsecurity22/presentation/jeitner