PT-2006-3054 · Isc+1 · Isc Bind+1

Published 2006-04-27 · Updated 2017-07-20 · CVE-2006-2073

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions ISC BIND (affected versions not specified)

Description The issue is related to a remote denial-of-service vulnerability in ISC BIND. It is caused by an error in handling the TSIG (Transaction Signature) in the second or subsequent messages in a zone transfer. This can be exploited to crash the "named" service via a malformed TSIG in the messages. Successful exploitation requires that the first zone transfer message have a valid TSIG.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2006-2073

Affected Products

Bind Server

Isc Bind

References · 14

• https://osv.dev/vulnerability/CVE-2006-2073 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2006-2073 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-2073 · Security Note
• http://niscc.gov.uk/niscc/docs/br-20060425-00311.html?lang=en · Vendor Advisory
• http://niscc.gov.uk/niscc/docs/re-20060425-00312.pdf?lang=en · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2006-2073 · Vendor Advisory
• http://secunia.com/advisories/19808 · Vendor Advisory
• http://securityfocus.com/bid/17692 · Note
• http://securitytracker.com/id?1015993 · Note
• http://kb.cert.org/vuls/id/955777 · Note
• http://vupen.com/english/advisories/2006/1505 · Note
• http://securitylab.ru/vulnerability/266312.php · Note
• http://vupen.com/english/advisories/2006/1537 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26081 · Note