Anfälligkeitssuche        Suche in 324607 CVE Beschreibungen
und 146377 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.881701
Kategorie:CentOS Local Security Checks
Titel:CentOS Update for bind97 CESA-2013:0690 centos5
Zusammenfassung:The remote host is missing an update for the 'bind97'; package(s) announced via the referenced advisory.
Beschreibung:Summary:
The remote host is missing an update for the 'bind97'
package(s) announced via the referenced advisory.

Vulnerability Insight:
The Berkeley Internet Name Domain (BIND) is an implementation of the
Domain Name System (DNS) protocols. BIND includes a DNS server (named), a
resolver library (routines for applications to use when interfacing with
DNS), and tools for verifying that the DNS server is operating correctly.

A denial of service flaw was found in the libdns library. A remote attacker
could use this flaw to send a specially-crafted DNS query to named that,
when processed, would cause named to use an excessive amount of memory, or
possibly crash. (CVE-2013-2266)

Note: This update disables the syntax checking of NAPTR (Naming Authority
Pointer) resource records.

All bind97 users are advised to upgrade to these updated packages, which
contain a patch to correct this issue. After installing the update, the
BIND daemon (named) will be restarted automatically.

Affected Software/OS:
bind97 on CentOS 5

Solution:
Please install the updated packages.

CVSS Score:
7.8

CVSS Vector:
AV:N/AC:L/Au:N/C:N/I:N/A:C

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2013-2266
http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html
BugTraq ID: 58736
http://www.securityfocus.com/bid/58736
Debian Security Information: DSA-2656 (Google Search)
http://www.debian.org/security/2013/dsa-2656
http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101500.html
http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101603.html
HPdes Security Advisory: HPSBUX02876
http://marc.info/?l=bugtraq&m=136804614120794&w=2
HPdes Security Advisory: SSRT101148
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19579
RedHat Security Advisories: RHSA-2013:0689
http://rhn.redhat.com/errata/RHSA-2013-0689.html
RedHat Security Advisories: RHSA-2013:0690
http://rhn.redhat.com/errata/RHSA-2013-0690.html
http://www.ubuntu.com/usn/USN-1783-1
CopyrightCopyright (C) 2013 Greenbone AG

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2025 E-Soft Inc. Alle Rechte vorbehalten.