Description
Kerio WinRoute Firewall before 6.0.9 uses information from PTR queries in response to A queries, which allows remote attackers to poison the DNS cache or cause a denial of service (connection loss).
References
- kerio-winroute-dns-cache-poisoning(18410) vdb-entry
- 12293 vdb-entry
- 13374 third-party-advisory
- http://www.kerio.com/security_advisory.html
- 11870 vdb-entry
- 12294 vdb-entry