| Description: | Description:
The remote host is missing an update to bind
announced via advisory MDKSA-2002:038-1.
A vulnerability was discovered in the BIND9 DNS server in versions
prior to 9.2.1. An error condition will trigger the shutdown of the
server when the rdataset parameter to the dns_message_findtype()
function in message.c is not NULL as expected. This condition causes
the server to assert an error message and shutdown the BIND server.
The error condition can be remotely exploited by a special DNS packet.
This can only be used to create a Denial of Service on the server
the
error condition is correctly detected, so it will not allow an attacker
to execute arbitrary code on the server.
Update:
Sascha Kettler noticed that the version of BIND9 supplied originally
was in fact 9.2.1RC1 and mis-labelled as 9.2.1. The packages provided
in this update are BIND 9.2.1 final. Likewise, the buffer overflow
in the DNS resolver libraries, as noted in MDKSA-2002:043, has also
been fixed. Thanks to Bernhard Rosenkraenzer at Red Hat for
backporting the patches from 8.3.3 to 9.2.1.
Affected versions: 8.0, 8.1, 8.2
Solution:
To upgrade automatically use MandrakeUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.
http://www.securityspace.com/smysecure/catid.html?in=MDKSA-2002:038-1
http://www.kb.cert.org/vuls/id/739123
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0400
http://www.kb.cert.org/vuls/id/803539
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0651
Risk factor : High
CVSS Score:
7.5
|
