Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.1

BlueCat Adonis 5.0.2.8 can crash from network packet

CVE-2007-4205 · published 19 years ago
Summary

The heartbeat component used by the BlueCat Adonis DNS/DHCP appliance can be stopped if an attacker sends a specially‑crafted UDP packet to port 694. This forces the control process to exit, causing a temporary loss of DNS/DHCP service. Apply the vendor’s update or block inbound traffic to port 694 as a mitigation step.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
linux-ha heartbeat <= 1.2.4
cpe:2.3:a:linux-ha:heartbeat:*:*:*:*:*:*:*:*
Original advisory text
XHA (Linux-HA) on the BlueCat Networks Adonis DNS/DHCP Appliance 5.0.2.8 allows remote attackers to cause a denial of service (heartbeat control process crash) via a UDP packet to port 694. NOTE: ...
XHA (Linux-HA) on the BlueCat Networks Adonis DNS/DHCP Appliance 5.0.2.8 allows remote attackers to cause a denial of service (heartbeat control process crash) via a UDP packet to port 694. NOTE: this may be the same as CVE-2006-3121.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
7.1 High
Exploitation
3% chance of attack within 30 days
Timeline
Published8 Aug 2007
Updated29 Oct 2026
First seen29 Sep 2026
Sources
CVE-2007-4205 · NVD
Track software like this
Free during beta