CVE-2004-0789

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2004-12-31 · updated 2026-06-16

Description

Multiple implementations of the DNS protocol, including (1) Poslib 1.0.2-1 and earlier as used by Posadis, (2) Axis Network products before firmware 3.13, and (3) Men & Mice Suite 2.2x before 2.2.3 and 3.5.x before 3.5.2, allow remote attackers to cause a denial of service (CPU and network bandwidth consumption) by triggering a communications loop via (a) DNS query packets with localhost as a spoofed source address, or (b) a response packet that triggers a response packet.

Affected products

Axis 2100 Network Camera: 2.0, 2.01, 2.02, 2.03, 2.12, 2.30 (+6)
Axis 2110 Network Camera: 2.12, 2.30, 2.31, 2.32, 2.34, 2.40 (+1)
Axis 2120 Network Camera: 2.12, 2.30, 2.31, 2.32, 2.34, 2.40 (+1)
Axis 2400 Video Server: 3.11, 3.12
Axis 2401 Video Server: 3.12
Axis 2420 Network Camera: 2.12, 2.30, 2.31, 2.32, 2.33, 2.34 (+2)
Axis 2460 Network Dvr: 3.12
National Institute of Advanced Industrial Science and Technology DeleGate: 7.7.0, 7.7.1, 7.8.0, 7.8.1, 7.8.2, 7.9.11 (+10)
Dnrd: 1.0, 1.1, 1.2, 1.3, 1.4, 2.0 (+10)
Don Moore Mydns: 0.6, 0.7, 0.8, 0.9, 0.10.0
MaraDNS: 0.5.28, 0.5.29, 0.5.30, 0.5.31, 0.8.05
Pliant Dns Server: all versions
Posadis: 0.50.4, 0.50.5, 0.50.6, 0.50.7, 0.50.8, 0.50.9 (+4)
Qbik Wingate: 3.0, 4.0.1, 4.1_beta_a, 6.0, 6.0.1_build_993, 6.0.1_build_995
Team Johnlong Raidendnsd: all versions

References

Get alerted when CVE-2004-0789 or the next vulnerability affects your stack