Home ▼ Bookkeeping
Online ▼ Security
Audits ▼
Managed
DNS ▼
About
Order
FAQ
Acceptable Use Policy
Dynamic DNS Clients
Configure Domains Dyanmic DNS Update Password Network
Monitor ▼
Enterprise Package
Advanced Package
Standard Package
Free Trial
FAQ
Price/Feature Summary
Order/Renew
Examples
Configure/Status Alert Profiles | |||
Test ID: | 1.3.6.1.4.1.25623.1.0.103031 |
Category: | General |
Title: | ISC BIND < 9.7.2-P2 Multiple Vulnerabilities |
Summary: | ISC BIND is prone to multiple vulnerabilities. |
Description: | Summary: ISC BIND is prone to multiple vulnerabilities. Vulnerability Insight: The following flaws exist: - A remote denial-of-service vulnerability because the software fails to handle certain bad signatures in a DNS query (CVE-2010-3762). An attacker can exploit this issue to cause the application to crash, denying service to legitimate users. - A flaw where the wrong ACL was applied was fixed. This flaw allowed access to a cache via recursion even though the ACL disallowed it. Successfully exploiting this issue allows remote attackers to bypass zone-and-view Access Control Lists (ACLs) to perform unintended queries. Affected Software/OS: Versions prior to BIND 9.7.2-P2 are vulnerable. Solution: Updates are available. Please see the references for more information. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P |
Cross-Ref: |
BugTraq ID: 45385 Common Vulnerability Exposure (CVE) ID: CVE-2010-3762 http://www.securityfocus.com/bid/45385 Bugtraq: 20110308 VMSA-2011-0004 VMware ESX/ESXi SLPD denial of service vulnerability and ESX third party updates for Service Console packages bind, pam, and rpm. (Google Search) http://www.securityfocus.com/archive/1/516909/100/0/threaded Debian Security Information: DSA-2130 (Google Search) http://www.debian.org/security/2010/dsa-2130 http://www.mandriva.com/security/advisories?name=MDVSA-2010:253 http://lists.vmware.com/pipermail/security-announce/2011/000126.html http://www.redhat.com/support/errata/RHSA-2010-0976.html http://www.vupen.com/english/advisories/2011/0606 |
Copyright | Copyright (C) 2011 Greenbone Networks GmbH |
This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below. |