Secunia

SheerDNS contains two errors, which in combination can be exploited by malicious users to escalate their privileges.

One problem is a buffer overflow in the parsing of zone files. This is not in itself a security issue, because only root should have write access to the zone files.

The other problem is that SheerDNS doesn't verify incoming queries for malicious characters. This can be exploited by sending malicious DNS queries to conduct directory traversal.

The combination of these two errors allows malicious, local users to create a malicious zone file in eg. the "/tmp" directory. By sending a malicious request, it is possible to make SheerDNS read and parse the malicious zone file.

Version 1.0.0 is vulnerable.

Solution
Update to version 1.0.1.

Provided and/or discovered by
Frank DENIS (Jedi/Sector One)

Deep Links
Links available in Customer Area