{"id":"CVE-2004-0789","aliases":["EUVD-2004-0787","GHSA-3jm2-9cp5-5xp7"],"status":"published","title":"Multiple implementations of the DNS protocol, including (1) Poslib 1.0.2-1 and earlier as used by...","description":"Multiple implementations of the DNS protocol, including (1) Poslib 1.0.2-1 and earlier as used by Posadis, (2) Axis Network products before firmware 3.13, and (3) Men \u0026 Mice Suite 2.2x before 2.2.3 and 3.5.x before 3.5.2, allow remote attackers to cause a denial of service (CPU and network bandwidth consumption) by triggering a communications loop via (a) DNS query packets with localhost as a spoofed source address, or (b) a response packet that triggers a response packet.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02765,"percentile":0.86392,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2004-12-31T05:00:00Z","modified":"2026-06-16T22:06:22Z","exploits":[{"source":"pocgithub","id":"HimmeL-Byte/CVE-2004-0789-DDOS","title":"HimmeL-Byte/CVE-2004-0789-DDOS","date":"2025-05-06","url":"https://github.com/HimmeL-Byte/CVE-2004-0789-DDOS"}],"products":[{"vendor":"axis","product":"2100_network_camera"},{"vendor":"axis","product":"2110_network_camera"},{"vendor":"axis","product":"2120_network_camera"},{"vendor":"axis","product":"2400_video_server"},{"vendor":"axis","product":"2401_video_server"},{"vendor":"axis","product":"2420_network_camera"},{"vendor":"axis","product":"2460_network_dvr"},{"vendor":"delegate","product":"delegate"},{"vendor":"dnrd","product":"dnrd"},{"vendor":"don_moore","product":"mydns"},{"vendor":"maradns","product":"maradns"},{"vendor":"pliant","product":"pliant_dns_server"},{"vendor":"posadis","product":"posadis"},{"vendor":"qbik","product":"wingate"},{"vendor":"team_johnlong","product":"raidendnsd"}],"references":[{"url":"http://secunia.com/advisories/13145","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17997","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://securitytracker.com/id?1012157","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Patch"]},{"url":"http://www.securityfocus.com/bid/11642","tags":["vdb-entry","x_refsource_BID","x_transferred","Patch"]},{"url":"http://www.niscc.gov.uk/niscc/docs/al-20041130-00862.html?lang=en","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"http://www.posadis.org/advisories/pos_adv_006.txt","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.niscc.gov.uk/niscc/docs/re-20041109-00957.pdf","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2004-0789"},{"url":"https://github.com/advisories/GHSA-3jm2-9cp5-5xp7"}],"sources":{"cve":[{"id":"CVE-2004-0789","description":"Multiple implementations of the DNS protocol, including (1) Poslib 1.0.2-1 and earlier as used by Posadis, (2) Axis Network products before firmware 3.13, and (3) Men \u0026 Mice Suite 2.2x before 2.2.3 and 3.5.x before 3.5.2, allow remote attackers to cause a denial of service (CPU and network bandwidth consumption) by triggering a communications loop via (a) DNS query packets with localhost as a spoofed source address, or (b) a response packet that triggers a response packet.","status":"published","published":"2005-09-01T04:00:00Z","modified":"2024-08-08T00:31:46.847Z","updated_at":"2026-11-02T14:34:55.098814Z"}],"euvd":[{"id":"EUVD-2004-0787","description":"Multiple implementations of the DNS protocol, including (1) Poslib 1.0.2-1 and earlier as used by Posadis, (2) Axis Network products before firmware 3.13, and (3) Men \u0026 Mice Suite 2.2x before 2.2.3 and 3.5.x before 3.5.2, allow remote attackers to cause a denial of service (CPU and network bandwidth consumption) by triggering a communications loop via (a) DNS query packets with localhost as a spoofed source address, or (b) a response packet that triggers a response packet.","status":"published","published":"2005-09-01T04:00:00Z","modified":"2024-08-08T00:31:46Z","updated_at":"2026-11-03T01:15:17.778038Z"}],"ghsa":[{"id":"GHSA-3jm2-9cp5-5xp7","title":"Multiple implementations of the DNS protocol, including (1) Poslib 1.0.2-1 and earlier as used by...","description":"Multiple implementations of the DNS protocol, including (1) Poslib 1.0.2-1 and earlier as used by Posadis, (2) Axis Network products before firmware 3.13, and (3) Men \u0026 Mice Suite 2.2x before 2.2.3 and 3.5.x before 3.5.2, allow remote attackers to cause a denial of service (CPU and network bandwidth consumption) by triggering a communications loop via (a) DNS query packets with localhost as a spoofed source address, or (b) a response packet that triggers a response packet.","status":"published","published":"2022-04-29T02:58:22Z","modified":"2023-01-30T05:03:03Z","updated_at":"2026-11-02T14:46:45.547616Z"}],"nvd":[{"id":"CVE-2004-0789","description":"Multiple implementations of the DNS protocol, including (1) Poslib 1.0.2-1 and earlier as used by Posadis, (2) Axis Network products before firmware 3.13, and (3) Men \u0026 Mice Suite 2.2x before 2.2.3 and 3.5.x before 3.5.2, allow remote attackers to cause a denial of service (CPU and network bandwidth consumption) by triggering a communications loop via (a) DNS query packets with localhost as a spoofed source address, or (b) a response packet that triggers a response packet.","status":"published","published":"2004-12-31T05:00:00Z","modified":"2026-06-16T22:06:22.79Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:00:51.985436Z"}]}}