PT-2002-1131 · Isc+1 · Isc Bind+1

Publicado 2002-11-21 · Atualizado 2008-09-10 · CVE-2002-0029

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ISC BIND versions 4.9.2 through 4.9.10

Description The issue is related to buffer overflows in the DNS stub resolver library, which can be triggered by remote attackers via DNS server responses. This can lead to the execution of arbitrary code on the system with the same privileges as the process that calls the affected function. The getnetbyname and getnetbyaddr functions are specifically vulnerable due to improper bounds checking of responses for network name and address requests.

Recommendations For ISC BIND versions 4.9.2 through 4.9.10, consider updating to a version that includes the fix for the buffer overflow issue in the stub resolver library. As a temporary workaround, restrict access to the getnetbyname() and getnetbyaddr() functions to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2002-0029

DSA-196

Produtos afetados

Bind Server

Isc Bind

Referências · 11

• https://nvd.nist.gov/vuln/detail/CVE-2002-0029 · Nota de Segurança
• http://iss.net/security_center/static/10624.php · Aviso do Fabricante
• http://kb.cert.org/vuls/id/844360 · Nota
• http://securityfocus.com/bid/6186 · Nota
• ftp://patches.sgi.com/support/free/security/advisories/20021201-01-P · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2002-0029 · Nota de Segurança
• ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-028.txt.asc · Aviso do Fabricante
• http://isc.org/products/BIND/bind-security.html · Aviso do Fabricante
• http://xforce.iss.net/xforce/xfdb/10624 · Nota
• http://cert.org/advisories/CA-2002-31.html · Correção
• http://lists.apple.com/archives/Security-announce/2002/Nov/msg00000.html · Aviso do Fabricante