PT-2012-4704 · Isc+2 · Bind-Dyndb-Ldap+2

Sigbjorn Lie · Published 2012-08-03 · Updated 2017-08-29 · CVE-2012-3429

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions bind-dyndb-ldap version 1.1.0rc1 and earlier

Description The issue arises from the dns to ldap dn escape function in src/ldap convert.c, which fails to properly escape distinguished names (DN) for LDAP queries. This allows remote DNS servers to cause a denial of service, specifically a named service hang, by including a "$" character in a DN within a DNS query.

Recommendations For bind-dyndb-ldap version 1.1.0rc1 and earlier, consider disabling the dns to ldap dn escape function until a patch is available to properly escape distinguished names and prevent the denial of service.

Exploit

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CESA-2012_1139

CVE-2012-3429

RHSA-2012:1139

RHSA-2012_1139

Affected Products

Centos

Red Hat

Bind-Dyndb-Ldap

References · 19

• 🔥 http://git.fedorahosted.org/cgit/bind-dyndb-ldap.git/commit/?id=f345805c73c294db42452ae966c48fbc36c48006 · Exploit
• http://secunia.com/advisories/50086 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2012-1139.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-3429 · Security Note
• http://rhn.redhat.com/errata/RHSA-2012-1139.html · Vendor Advisory
• http://securitytracker.com/id?1027341 · Patch
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3429 · Security Note
• http://secunia.com/advisories/50159 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=842466 · Note
• https://lists.centos.org/pipermail/centos-announce/2012-August/068259.html · Note
• http://openwall.com/lists/oss-security/2012/08/02/5 · Note
• https://lists.centos.org/pipermail/centos-announce/2012-August/055703.html · Note
• http://securityfocus.com/bid/54787 · Note
• https://access.redhat.com/security/cve/CVE-2012-3429 · Note
• https://rhn.redhat.com/errata/RHSA-2012-1139.html · Note