CVE ID:	CVE-2002-1220
Description:	BIND 8.3.x through 8.3.3 allows remote attackers to cause a denial of service (termination due to assertion failure) via a request for a subdomain that does not exist, with an OPT resource record with a large UDP payload size.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2002-1220 http://lists.apple.com/archives/Security-announce/2002/Nov/msg00000.html BugTraq ID: 6161 http://www.securityfocus.com/bid/6161 Bugtraq: 20021112 [Fwd: Notice of serious vulnerabilities in ISC BIND 4 & 8] (Google Search) http://marc.info/?l=bugtraq&m=103713117612842&w=2 Bugtraq: 20021115 [OpenPKG-SA-2002.011] OpenPKG Security Advisory (bind, bind8) (Google Search) http://online.securityfocus.com/archive/1/300019 Bugtraq: 20021118 TSLSA-2002-0076 - bind (Google Search) http://marc.info/?l=bugtraq&m=103763574715133&w=2 Caldera Security Advisory: CSSA-2003-SCO.2 Cert/CC Advisory: CA-2002-31 http://www.cert.org/advisories/CA-2002-31.html CERT/CC vulnerability note: VU#229595 http://www.kb.cert.org/vuls/id/229595 Computer Incident Advisory Center Bulletin: N-013 http://www.ciac.org/ciac/bulletins/n-013.shtml COMPAQ Service Security Patch: SSRT2408 http://online.securityfocus.com/advisories/4999 Debian Security Information: DSA-196 (Google Search) http://www.debian.org/security/2002/dsa-196 En Garde Linux Advisory: ESA-20021114-029 FreeBSD Security Advisory: FreeBSD-SA-02:43 ISS Security Advisory: 20021112 Multiple Remote Vulnerabilities in BIND4 and BIND8 http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21469 http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-077.php https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A449 SuSE Security Announcement: SuSE-SA:2002:044 (Google Search) XForce ISS Database: bind-opt-rr-dos(10332) https://exchange.xforce.ibmcloud.com/vulnerabilities/10332