Test ID:	1.3.6.1.4.1.25623.1.0.64558
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DSA-1847-1)
Summary:	The remote host is missing an update for the Debian 'bind9' package(s) announced via the DSA-1847-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'bind9' package(s) announced via the DSA-1847-1 advisory. Vulnerability Insight: It was discovered that the BIND DNS server terminates when processing a specially crafted dynamic DNS update. This vulnerability affects all BIND servers which serve at least one DNS zone authoritatively, as a master, even if dynamic updates are not enabled. The default Debian configuration for resolvers includes several authoritative zones, too, so resolvers are also affected by this issue unless these zones have been removed. For the old stable distribution (etch), this problem has been fixed in version 9.3.4-2etch5. For the stable distribution (lenny), this problem has been fixed in version 9.5.1.dfsg.P3-1. For the unstable distribution (sid), this problem has been fixed in version 1:9.6.1.dfsg.P1-1. We recommend that you upgrade your bind9 packages. Affected Software/OS: 'bind9' package(s) on Debian 4, Debian 5. Solution: Please install the updated package(s). CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2009-0696 Bugtraq: 20090729 rPSA-2009-0113-1 bind bind-utils (Google Search) http://www.securityfocus.com/archive/1/505403/100/0/threaded Bugtraq: 20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components (Google Search) http://www.securityfocus.com/archive/1/507985/100/0/threaded CERT/CC vulnerability note: VU#725188 http://www.kb.cert.org/vuls/id/725188 https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01265.html NETBSD Security Advisory: NetBSD-SA2009-013 ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-013.txt.asc OpenBSD Security Advisory: [4.4] 014: RELIABILITY FIX: July 29, 2009 http://www.openbsd.org/errata44.html#014_bind https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10414 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12245 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7806 http://www.securitytracker.com/id?1022613 http://secunia.com/advisories/36035 http://secunia.com/advisories/36038 http://secunia.com/advisories/36050 http://secunia.com/advisories/36053 http://secunia.com/advisories/36056 http://secunia.com/advisories/36063 http://secunia.com/advisories/36086 http://secunia.com/advisories/36098 http://secunia.com/advisories/36192 http://secunia.com/advisories/37471 http://secunia.com/advisories/39334 http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.561499 http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020788.1-1 http://sunsolve.sun.com/search/document.do?assetkey=1-26-264828-1 http://www.ubuntu.com/usn/usn-808-1 http://www.vupen.com/english/advisories/2009/2036 http://www.vupen.com/english/advisories/2009/2088 http://www.vupen.com/english/advisories/2009/2171 http://www.vupen.com/english/advisories/2009/2247 http://www.vupen.com/english/advisories/2009/3316
Copyright	Copyright (C) 2009 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.