{ "id": "CVE-2005-0877", "sourceIdentifier": "cve@mitre.org", "published": "2005-05-02T04:00:00.000", "lastModified": "2017-07-11T01:32:26.953", "vulnStatus": "Modified", "descriptions": [ { "lang": "en", "value": "Dnsmasq before 2.21 allows remote attackers to poison the DNS cache via answers to queries that were not made by Dnsmasq." } ], "metrics": { "cvssMetricV2": [ { "source": "nvd@nist.gov", "type": "Primary", "cvssData": { "version": "2.0", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector": "NETWORK", "accessComplexity": "LOW", "authentication": "NONE", "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "availabilityImpact": "NONE", "baseScore": 5.0 }, "baseSeverity": "MEDIUM", "exploitabilityScore": 10.0, "impactScore": 2.9, "acInsufInfo": false, "obtainAllPrivilege": false, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false } ] }, "weaknesses": [ { "source": "nvd@nist.gov", "type": "Primary", "description": [ { "lang": "en", "value": "NVD-CWE-Other" } ] } ], "configurations": [ { "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:a:dnsmasq:dnsmasq:2.0:*:*:*:*:*:*:*", "matchCriteriaId": "838E0AFE-841C-4F8E-B474-F05B4F3BF510" }, { "vulnerable": true, "criteria": "cpe:2.3:a:dnsmasq:dnsmasq:2.1:*:*:*:*:*:*:*", "matchCriteriaId": "56B390B5-446E-4082-BD3F-C9BD548F66D3" }, { "vulnerable": true, "criteria": "cpe:2.3:a:dnsmasq:dnsmasq:2.2:*:*:*:*:*:*:*", "matchCriteriaId": "3085AD0F-5800-4601-8A39-52602CBFB8EB" }, { "vulnerable": true, "criteria": "cpe:2.3:a:dnsmasq:dnsmasq:2.3:*:*:*:*:*:*:*", "matchCriteriaId": "50065308-7EE7-4B47-AEC8-C4F57D611197" }, { "vulnerable": true, "criteria": "cpe:2.3:a:dnsmasq:dnsmasq:2.4:*:*:*:*:*:*:*", "matchCriteriaId": "D79CAF47-A848-4462-AD4B-64C550739270" }, { "vulnerable": true, "criteria": "cpe:2.3:a:dnsmasq:dnsmasq:2.5:*:*:*:*:*:*:*", "matchCriteriaId": "2331C05A-E122-4DE4-BA65-0575D6FC1B9A" }, { "vulnerable": true, "criteria": "cpe:2.3:a:dnsmasq:dnsmasq:2.6:*:*:*:*:*:*:*", "matchCriteriaId": "5D02A6A6-D36D-4A97-B2B2-8F9BB0B94C89" }, { "vulnerable": true, "criteria": "cpe:2.3:a:dnsmasq:dnsmasq:2.7:*:*:*:*:*:*:*", "matchCriteriaId": "3BB383B7-708C-4B4E-A6D2-B1835A643246" }, { "vulnerable": true, "criteria": "cpe:2.3:a:dnsmasq:dnsmasq:2.8:*:*:*:*:*:*:*", "matchCriteriaId": "363C67DA-0309-48C2-A49C-4C0C145C6512" }, { "vulnerable": true, "criteria": "cpe:2.3:a:dnsmasq:dnsmasq:2.9:*:*:*:*:*:*:*", "matchCriteriaId": "E8A35CB9-8D08-4187-8A4D-BAEE71FED60F" }, { "vulnerable": true, "criteria": "cpe:2.3:a:dnsmasq:dnsmasq:2.10:*:*:*:*:*:*:*", "matchCriteriaId": "BC961D2F-40A8-4E75-971B-5312A32B2B9F" }, { "vulnerable": true, "criteria": "cpe:2.3:a:dnsmasq:dnsmasq:2.11:*:*:*:*:*:*:*", "matchCriteriaId": "E1187D5E-7161-40BD-B67D-82176154CD16" }, { "vulnerable": true, "criteria": "cpe:2.3:a:dnsmasq:dnsmasq:2.12:*:*:*:*:*:*:*", "matchCriteriaId": "53732CE0-FBC3-4571-AB49-69C61C7BE4AE" }, { "vulnerable": true, "criteria": "cpe:2.3:a:dnsmasq:dnsmasq:2.13:*:*:*:*:*:*:*", "matchCriteriaId": "5669B7D1-0C43-42C6-A3C0-3FF9020B29B0" }, { "vulnerable": true, "criteria": "cpe:2.3:a:dnsmasq:dnsmasq:2.14:*:*:*:*:*:*:*", "matchCriteriaId": "9054BC03-902A-4569-89FE-B765181D6AC1" }, { "vulnerable": true, "criteria": "cpe:2.3:a:dnsmasq:dnsmasq:2.15:*:*:*:*:*:*:*", "matchCriteriaId": "BDF92F86-8083-4EF3-A42E-B05173059E67" }, { "vulnerable": true, "criteria": "cpe:2.3:a:dnsmasq:dnsmasq:2.16:*:*:*:*:*:*:*", "matchCriteriaId": "5D53AAC2-6A09-4AFD-A24D-EF4F78E6F173" }, { "vulnerable": true, "criteria": "cpe:2.3:a:dnsmasq:dnsmasq:2.17:*:*:*:*:*:*:*", "matchCriteriaId": "BB01CC8D-650B-4EB4-9B35-E471B7728EBE" }, { "vulnerable": true, "criteria": "cpe:2.3:a:dnsmasq:dnsmasq:2.18:*:*:*:*:*:*:*", "matchCriteriaId": "0CD3B486-1D9E-482E-9BFF-BE218ECA806F" }, { "vulnerable": true, "criteria": "cpe:2.3:a:dnsmasq:dnsmasq:2.19:*:*:*:*:*:*:*", "matchCriteriaId": "F5FB2501-8A36-4659-8A44-FDE030D77B7E" }, { "vulnerable": true, "criteria": "cpe:2.3:a:dnsmasq:dnsmasq:2.20:*:*:*:*:*:*:*", "matchCriteriaId": "669F9839-B687-43C1-9744-9E2873944BF3" } ] } ] } ], "references": [ { "url": "http://www.securityfocus.com/bid/12897", "source": "cve@mitre.org", "tags": [ "Patch" ] }, { "url": "http://www.thekelleys.org.uk/dnsmasq/CHANGELOG", "source": "cve@mitre.org" }, { "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/19826", "source": "cve@mitre.org" } ] }