mirror of
https://github.com/fkie-cad/nvd-json-data-feeds.git
synced 2025-05-28 09:11:28 +00:00
186 lines
6.2 KiB
JSON
186 lines
6.2 KiB
JSON
{
|
|
"id": "CVE-2005-0877",
|
|
"sourceIdentifier": "cve@mitre.org",
|
|
"published": "2005-05-02T04:00:00.000",
|
|
"lastModified": "2017-07-11T01:32:26.953",
|
|
"vulnStatus": "Modified",
|
|
"descriptions": [
|
|
{
|
|
"lang": "en",
|
|
"value": "Dnsmasq before 2.21 allows remote attackers to poison the DNS cache via answers to queries that were not made by Dnsmasq."
|
|
}
|
|
],
|
|
"metrics": {
|
|
"cvssMetricV2": [
|
|
{
|
|
"source": "nvd@nist.gov",
|
|
"type": "Primary",
|
|
"cvssData": {
|
|
"version": "2.0",
|
|
"vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N",
|
|
"accessVector": "NETWORK",
|
|
"accessComplexity": "LOW",
|
|
"authentication": "NONE",
|
|
"confidentialityImpact": "NONE",
|
|
"integrityImpact": "PARTIAL",
|
|
"availabilityImpact": "NONE",
|
|
"baseScore": 5.0
|
|
},
|
|
"baseSeverity": "MEDIUM",
|
|
"exploitabilityScore": 10.0,
|
|
"impactScore": 2.9,
|
|
"acInsufInfo": false,
|
|
"obtainAllPrivilege": false,
|
|
"obtainUserPrivilege": false,
|
|
"obtainOtherPrivilege": false,
|
|
"userInteractionRequired": false
|
|
}
|
|
]
|
|
},
|
|
"weaknesses": [
|
|
{
|
|
"source": "nvd@nist.gov",
|
|
"type": "Primary",
|
|
"description": [
|
|
{
|
|
"lang": "en",
|
|
"value": "NVD-CWE-Other"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"configurations": [
|
|
{
|
|
"nodes": [
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:dnsmasq:dnsmasq:2.0:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "838E0AFE-841C-4F8E-B474-F05B4F3BF510"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:dnsmasq:dnsmasq:2.1:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "56B390B5-446E-4082-BD3F-C9BD548F66D3"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:dnsmasq:dnsmasq:2.2:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "3085AD0F-5800-4601-8A39-52602CBFB8EB"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:dnsmasq:dnsmasq:2.3:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "50065308-7EE7-4B47-AEC8-C4F57D611197"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:dnsmasq:dnsmasq:2.4:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "D79CAF47-A848-4462-AD4B-64C550739270"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:dnsmasq:dnsmasq:2.5:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "2331C05A-E122-4DE4-BA65-0575D6FC1B9A"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:dnsmasq:dnsmasq:2.6:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "5D02A6A6-D36D-4A97-B2B2-8F9BB0B94C89"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:dnsmasq:dnsmasq:2.7:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "3BB383B7-708C-4B4E-A6D2-B1835A643246"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:dnsmasq:dnsmasq:2.8:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "363C67DA-0309-48C2-A49C-4C0C145C6512"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:dnsmasq:dnsmasq:2.9:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "E8A35CB9-8D08-4187-8A4D-BAEE71FED60F"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:dnsmasq:dnsmasq:2.10:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "BC961D2F-40A8-4E75-971B-5312A32B2B9F"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:dnsmasq:dnsmasq:2.11:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "E1187D5E-7161-40BD-B67D-82176154CD16"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:dnsmasq:dnsmasq:2.12:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "53732CE0-FBC3-4571-AB49-69C61C7BE4AE"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:dnsmasq:dnsmasq:2.13:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "5669B7D1-0C43-42C6-A3C0-3FF9020B29B0"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:dnsmasq:dnsmasq:2.14:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "9054BC03-902A-4569-89FE-B765181D6AC1"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:dnsmasq:dnsmasq:2.15:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "BDF92F86-8083-4EF3-A42E-B05173059E67"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:dnsmasq:dnsmasq:2.16:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "5D53AAC2-6A09-4AFD-A24D-EF4F78E6F173"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:dnsmasq:dnsmasq:2.17:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "BB01CC8D-650B-4EB4-9B35-E471B7728EBE"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:dnsmasq:dnsmasq:2.18:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "0CD3B486-1D9E-482E-9BFF-BE218ECA806F"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:dnsmasq:dnsmasq:2.19:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "F5FB2501-8A36-4659-8A44-FDE030D77B7E"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:dnsmasq:dnsmasq:2.20:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "669F9839-B687-43C1-9744-9E2873944BF3"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"references": [
|
|
{
|
|
"url": "http://www.securityfocus.com/bid/12897",
|
|
"source": "cve@mitre.org",
|
|
"tags": [
|
|
"Patch"
|
|
]
|
|
},
|
|
{
|
|
"url": "http://www.thekelleys.org.uk/dnsmasq/CHANGELOG",
|
|
"source": "cve@mitre.org"
|
|
},
|
|
{
|
|
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/19826",
|
|
"source": "cve@mitre.org"
|
|
}
|
|
]
|
|
} |