• info
• discussion
• exploit
• solution
• references

NSD 'packet.c' Off-By-One Buffer Overflow Vulnerability

Solution:
The vendor has released fixes. Please see the references for details.


Debian Linux 4.0 arm

• Debian nsd_2.3.6-1+etch1_arm.deb
  http://security.debian.org/pool/updates/main/n/nsd/nsd_2.3.6-1+etch1_a rm.deb

Debian Linux 5.0 ia-64

• Debian nsd_2.3.7-1.1+lenny1_ia64.deb
  http://security.debian.org/pool/updates/main/n/nsd/nsd_2.3.7-1.1+lenny 1_ia64.deb


• Debian nsd3_3.0.7-3.lenny2_ia64.deb
  http://security.debian.org/pool/updates/main/n/nsd3/nsd3_3.0.7-3.lenny 2_ia64.deb

Debian Linux 4.0 powerpc

• Debian nsd_2.3.6-1+etch1_powerpc.deb
  http://security.debian.org/pool/updates/main/n/nsd/nsd_2.3.6-1+etch1_p owerpc.deb

Debian Linux 5.0 alpha

• Debian nsd_2.3.7-1.1+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/n/nsd/nsd_2.3.7-1.1+lenny 1_alpha.deb


• Debian nsd3_3.0.7-3.lenny2_alpha.deb
  http://security.debian.org/pool/updates/main/n/nsd3/nsd3_3.0.7-3.lenny 2_alpha.deb

Debian Linux 5.0 ia-32

• Debian nsd_2.3.7-1.1+lenny1_i386.deb
  http://security.debian.org/pool/updates/main/n/nsd/nsd_2.3.7-1.1+lenny 1_i386.deb


• Debian nsd3_3.0.7-3.lenny2_i386.deb
  http://security.debian.org/pool/updates/main/n/nsd3/nsd3_3.0.7-3.lenny 2_i386.deb

Debian Linux 5.0 s/390

• Debian nsd_2.3.7-1.1+lenny1_s390.deb
  http://security.debian.org/pool/updates/main/n/nsd/nsd_2.3.7-1.1+lenny 1_s390.deb


• Debian nsd3_3.0.7-3.lenny2_s390.deb
  http://security.debian.org/pool/updates/main/n/nsd3/nsd3_3.0.7-3.lenny 2_s390.deb

Debian Linux 5.0 mipsel

• Debian nsd_2.3.7-1.1+lenny1_mipsel.deb
  http://security.debian.org/pool/updates/main/n/nsd/nsd_2.3.7-1.1+lenny 1_mipsel.deb


• Debian nsd3_3.0.7-3.lenny2_mipsel.deb
  http://security.debian.org/pool/updates/main/n/nsd3/nsd3_3.0.7-3.lenny 2_mipsel.deb

Debian Linux 4.0 amd64

• Debian nsd_2.3.6-1+etch1_amd64.deb
  http://security.debian.org/pool/updates/main/n/nsd/nsd_2.3.6-1+etch1_a md64.deb

Debian Linux 4.0 ia-32

• Debian nsd_2.3.6-1+etch1_i386.deb
  http://security.debian.org/pool/updates/main/n/nsd/nsd_2.3.6-1+etch1_i 386.deb

Debian Linux 5.0 hppa

• Debian nsd_2.3.7-1.1+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/n/nsd/nsd_2.3.7-1.1+lenny 1_hppa.deb


• Debian nsd3_3.0.7-3.lenny2_hppa.deb
  http://security.debian.org/pool/updates/main/n/nsd3/nsd3_3.0.7-3.lenny 2_hppa.deb

Debian Linux 4.0 hppa

• Debian nsd_2.3.6-1+etch1_hppa.deb
  http://security.debian.org/pool/updates/main/n/nsd/nsd_2.3.6-1+etch1_h ppa.deb

Debian Linux 4.0 sparc

• Debian nsd_2.3.6-1+etch1_sparc.deb
  http://security.debian.org/pool/updates/main/n/nsd/nsd_2.3.6-1+etch1_s parc.deb

Debian Linux 4.0 s/390

• Debian nsd_2.3.6-1+etch1_s390.deb
  http://security.debian.org/pool/updates/main/n/nsd/nsd_2.3.6-1+etch1_s 390.deb

Debian Linux 5.0 arm

• Debian nsd_2.3.7-1.1+lenny1_arm.deb
  http://security.debian.org/pool/updates/main/n/nsd/nsd_2.3.7-1.1+lenny 1_arm.deb


• Debian nsd3_3.0.7-3.lenny2_arm.deb
  http://security.debian.org/pool/updates/main/n/nsd3/nsd3_3.0.7-3.lenny 2_arm.deb

Debian Linux 4.0 alpha

• Debian nsd_2.3.6-1+etch1_alpha.deb
  http://security.debian.org/pool/updates/main/n/nsd/nsd_2.3.6-1+etch1_a lpha.deb

Debian Linux 5.0 armel

• Debian nsd_2.3.7-1.1+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/n/nsd/nsd_2.3.7-1.1+lenny 1_armel.deb


• Debian nsd3_3.0.7-3.lenny2_armel.deb
  http://security.debian.org/pool/updates/main/n/nsd3/nsd3_3.0.7-3.lenny 2_armel.deb

Debian Linux 5.0 amd64

• Debian nsd_2.3.7-1.1+lenny1_amd64.deb
  http://security.debian.org/pool/updates/main/n/nsd/nsd_2.3.7-1.1+lenny 1_amd64.deb


• Debian nsd3_3.0.7-3.lenny2_amd64.deb
  http://security.debian.org/pool/updates/main/n/nsd3/nsd3_3.0.7-3.lenny 2_amd64.deb

Debian Linux 4.0 mipsel

• Debian nsd_2.3.6-1+etch1_mipsel.deb
  http://security.debian.org/pool/updates/main/n/nsd/nsd_2.3.6-1+etch1_m ipsel.deb

Debian Linux 5.0 mips

• Debian nsd_2.3.7-1.1+lenny1_mips.deb
  http://security.debian.org/pool/updates/main/n/nsd/nsd_2.3.7-1.1+lenny 1_mips.deb


• Debian nsd3_3.0.7-3.lenny2_mips.deb
  http://security.debian.org/pool/updates/main/n/nsd3/nsd3_3.0.7-3.lenny 2_mips.deb

Debian Linux 5.0 powerpc

• Debian nsd_2.3.7-1.1+lenny1_powerpc.deb
  http://security.debian.org/pool/updates/main/n/nsd/nsd_2.3.7-1.1+lenny 1_powerpc.deb


• Debian nsd3_3.0.7-3.lenny2_powerpc.deb
  http://security.debian.org/pool/updates/main/n/nsd3/nsd3_3.0.7-3.lenny 2_powerpc.deb

Debian Linux 4.0 ia-64

• Debian nsd_2.3.6-1+etch1_ia64.deb
  http://security.debian.org/pool/updates/main/n/nsd/nsd_2.3.6-1+etch1_i a64.deb

Debian Linux 4.0 mips

• Debian nsd_2.3.6-1+etch1_mips.deb
  http://security.debian.org/pool/updates/main/n/nsd/nsd_2.3.6-1+etch1_m ips.deb

Debian Linux 5.0 sparc

• Debian nsd_2.3.7-1.1+lenny1_sparc.deb
  http://security.debian.org/pool/updates/main/n/nsd/nsd_2.3.7-1.1+lenny 1_sparc.deb


• Debian nsd3_3.0.7-3.lenny2_sparc.deb
  http://security.debian.org/pool/updates/main/n/nsd3/nsd3_3.0.7-3.lenny 2_sparc.deb

NLnet Labs NSD 2.0

• NLnet Labs nsd-3.2.2.tar.gz
  http://www.nlnetlabs.nl/downloads/nsd/nsd-3.2.2.tar.gz

NLnet Labs NSD 2.3.7

• NLnet Labs nsd-3.2.2.tar.gz
  http://www.nlnetlabs.nl/downloads/nsd/nsd-3.2.2.tar.gz

NLnet Labs NSD 3.2.1

• NLnet Labs nsd-3.2.2.tar.gz
  http://www.nlnetlabs.nl/downloads/nsd/nsd-3.2.2.tar.gz