PT-2002-1454 · Isc+1 · Isc Bind 9+1

Published 2002-06-18 · Updated 2008-09-10 · CVE-2002-0400

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions ISC BIND 9 versions prior to 9.2.1

Description A logic error exists within the dns message findtype() routine that may allow remote attackers to cause the server program (named) to fail and shutdown. The issue arises when the rdataset parameter to the dns message findtype() function is not properly handled, leading to an error condition that triggers the server to shut down. This requires manual restart of the server.

Recommendations For versions prior to 9.2.1, update to version 9.2.1 or later to resolve the issue. As a temporary workaround, consider implementing measures to prevent malformed DNS packets from reaching the server, such as configuring firewall rules or using a DNS proxy to filter out suspicious traffic.

Fix

Related Identifiers

CVE-2002-0400

Affected Products

Bind Server

Isc Bind 9

References · 15

• http://redhat.com/support/errata/RHSA-2002-119.html · Vendor Advisory
• http://cert.org/advisories/CA-2002-15.html · Patch
• http://redhat.com/support/errata/RHSA-2002-105.html · Vendor Advisory
• http://iss.net/security_center/static/9250.php · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2003-154.html · Vendor Advisory
• http://novell.com/linux/security/advisories/2002_21_bind9.html · Vendor Advisory
• http://kb.cert.org/vuls/id/739123 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2002-0400 · Security Note
• ftp://ftp.caldera.com/pub/updates/OpenUNIX/CSSA-2002-SCO.24.1/CSSA-2002-SCO.24.1.txt · Vendor Advisory
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000494 · Vendor Advisory
• http://archives.neohapsis.com/archives/hp/2002-q3/0022.html · Vendor Advisory
• http://frontal2.mandriva.com/security/advisories?name=MDKSA-2002:038 · Vendor Advisory
• http://isc.org/index.pl?/sw/bind/bind-security.php · Note
• http://securityfocus.com/bid/4936 · Note
• http://xforce.iss.net/xforce/xfdb/9250 · Note