 |
Home ▼ Bookkeeping
Online ▼ Security
Audits ▼
Managed
DNS ▼
About
Order
FAQ
Acceptable Use Policy
Dynamic DNS Clients
Configure Domains Dyanmic DNS Update Password Network
Monitor ▼
Enterprise Package
Advanced Package
Standard Package
Free Trial
FAQ
Price/Feature Summary
Order/Renew
Examples
Configure/Status Alert Profiles | ||
| Test ID: | 1.3.6.1.4.1.25623.1.0.117778 |
| Category: | Denial of Service |
| Title: | ISC BIND DoS Vulnerability (CVE-2011-1907) |
| Summary: | ISC BIND is prone to a denial of service (DoS) vulnerability. |
| Description: | Summary: ISC BIND is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: BIND 9.8.0 introduced Response Policy Zones (RPZ), a mechanism for modifying DNS responses returned by a recursive server according to a set of rules which are either defined locally or imported from a reputation provider. In typical configurations, RPZ is used to force NXDOMAIN responses for untrusted names. It can also be used for RRset replacement, i.e., returning a positive answer defined by the response policy. Vulnerability Impact: When RPZ is being used, a query of type RRSIG for a name configured for RRset replacement will trigger an assertion failure and cause the name server process to exit. Affected Software/OS: ISC BIND version 9.8.0 only. Note: Only BIND installations which are using the RPZ feature configured for RRset replacement are affected. Solution: Update to version 9.8.0-P1 or later. As a workaround use RPZ only for forcing NXDOMAIN responses and not for RRset replacement. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P |
| Cross-Ref: |
Common Vulnerability Exposure (CVE) ID: CVE-2011-1907 BugTraq ID: 47734 http://www.securityfocus.com/bid/47734 Bugtraq: 20110506 Security Advisory: DNS BIND Security Advisory: RRSIG Queries Can Trigger Server Crash When Using Response Policy Zones (Google Search) http://www.securityfocus.com/archive/1/517900/100/0/threaded http://www.securitytracker.com/id?1025503 http://secunia.com/advisories/44416 http://www.vupen.com/english/advisories/2011/1183 XForce ISS Database: iscbind-rrsig-dos(67297) https://exchange.xforce.ibmcloud.com/vulnerabilities/67297 |
| Copyright | Copyright (C) 2021 Greenbone Networks GmbH |
| This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below. |