Description
The DNSSEC validation library (libval) library in dnssec-tools before 1.3.1 does not properly check that the signing key is the APEX trust anchor, which might allow attackers to conduct unspecified attacks.
References
- 29095 third-party-advisory
- dnssectools-libval-security-bypass(40836) vdb-entry
- ADV-2008-0673 vdb-entry
- http://sourceforge.net/mailarchive/forum.php?thread_name=sdlk5lolzj.fsf%40wes.hardakers.net&forum_name=dnssec-tools-users
- 29127 third-party-advisory
- FEDORA-2008-1758 vendor-advisory
- FEDORA-2008-1771 vendor-advisory
- 27998 vdb-entry