PT-2002-1131 · Isc+1 · Isc Bind+1

Published 2002-11-21 · Updated 2008-09-10 · CVE-2002-0029

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ISC BIND versions 4.9.2 through 4.9.10

Description The issue is related to buffer overflows in the DNS stub resolver library, which can be triggered by remote attackers via DNS server responses. This can lead to the execution of arbitrary code on the system with the same privileges as the process that calls the affected function. The getnetbyname and getnetbyaddr functions are specifically vulnerable due to improper bounds checking of responses for network name and address requests.

Recommendations For ISC BIND versions 4.9.2 through 4.9.10, consider updating to a version that includes the fix for the buffer overflow issue in the stub resolver library. As a temporary workaround, restrict access to the getnetbyname() and getnetbyaddr() functions to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2002-0029

DSA-196

Affected Products

Bind Server

Isc Bind

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2002-0029 · Security Note
• http://iss.net/security_center/static/10624.php · Vendor Advisory
• ftp://patches.sgi.com/support/free/security/advisories/20021201-01-P · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2002-0029 · Security Note
• ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-028.txt.asc · Vendor Advisory
• http://isc.org/products/BIND/bind-security.html · Vendor Advisory
• http://cert.org/advisories/CA-2002-31.html · Patch
• http://lists.apple.com/archives/Security-announce/2002/Nov/msg00000.html · Vendor Advisory
• http://kb.cert.org/vuls/id/844360 · Note
• http://securityfocus.com/bid/6186 · Note
• http://xforce.iss.net/xforce/xfdb/10624 · Note