Two vulnerabilities have been reported in BlueCat Networks Adonis, which can be exploited by malicious people to cause a DoS (Denial of Service) or to poison the DNS cache.

1) The appliance uses a vulnerable version of Heartbeat, which can be exploited to cause a DoS.

For more information:
SA21511

The vulnerability affects systems, where XHA is configured to use two Adonis servers in an active/passive cluster pair.

This vulnerability is reported in Adonis version 5.0.2.8. Other versions may also be affected.

2) The appliance uses a vulnerable version of BIND, which can be exploited to poison the DNS cache.

For more information:
SA26152

This vulnerability is reported in versions prior to 5.0.4.

Solution
Update to version 5.0.5.

Provided and/or discovered by
1) Reported in BlueCat Networks Adonis by forloop.
2) Reported by the vendor.

Changelog
Further details available in Customer Area

Original Advisory
http://archives.neohapsis.com/archives/bugtraq/2007-07/0357.html

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area