Matthew Dempsky discovered that Daniel J. Bernstein"s djbdns, a Domain Name System server, does not constrain offsets in the required manner, which allows remote attackers with control over a third-party subdomain served by tinydns and axfrdns, to trigger DNS responses containing arbitrary records via crafted zone data for this subdomain. The old stable distribution does not contain djbdns. For the stable distribution , this problem has been fixed in version 1.05-4+lenny1. For the unstable distribution , this problem has been fixed in version 1.05-5. We recommend that you upgrade your djbdns package.