Sign Up for Your FREE Weekly SecurityTracker E-mail Alert Summary
|
|
|
|
|
|
|
Put SecurityTracker Vulnerability Alerts on Your Web Site -- It's Free!
|
|
|
|
Become a Partner and License Our Database or Notification Service
|
|
|
|
|
|
|
|
|
|
|
|
|
|
BIND Memory Deference Bug Lets Remote Users Crash the Name Server
|
|
SecurityTracker Alert ID: 1017561
|
|
SecurityTracker URL: http://securitytracker.com/id?1017561
|
|
CVE Reference: CVE-2007-0493
(Links to External Site)
|
Updated: Jan 31 2007
|
Original Entry Date: Jan 25 2007
|
Impact: Denial of service via network
|
Fix Available: Yes
Vendor Confirmed: Yes
|
Version(s): 9.3.0 - 9.3.3, 9.4.x prior to 9.4.0rc2
|
Description: A vulnerability was reported in BIND. A remote user can cause denial of service conditions.
A remote user can send specially crafted data to cause the target 'named' service to dereference a freed fetch context and potentially
crash.
The following versions are affected:
BIND 9.3.0, 9.3.1, 9.3.2, 9.3.3
BIND 9.4.0a1, 9.4.0a2, 9.4.0a3, 9.4.0a4, 9.4.0a5,
9.4.0a6, 9.4.0b1, 9.4.0b2, 9.4.0b3, 9.4.0b4, 9.4.0rc1
BIND 9.5.0a1 (Bind Forum only)
|
Impact: A remote user can cause the target name service to crash.
|
Solution: The vendor has issued fixed versions (9.2.8, 9.3.4, and 9.4.0rc2).
The fix will be included in the upcoming BIND 9.5.0a2 release.
|
Vendor URL: www.isc.org/ (Links to External Site)
|
Cause: State error
|
Underlying OS: Linux (Any), UNIX (Any)
|
Reported By: Mark Andrews <Mark_Andrews@isc.org>
|
Message History:
This archive entry has one or more follow-up message(s) listed below.
|
Source Message Contents
|
Date: 2007-01-25 0:23:26
From: Mark Andrews <Mark_Andrews@isc.org>
Subject: Internet Systems Consortium Security Advisory.
|
Internet Systems Consortium Security Advisory.
BIND 9: dereferencing freed fetch context
12 January 2007
Versions affected:
BIND 9.3.0, 9.3.1, 9.3.2, 9.3.3
BIND 9.4.0a1, 9.4.0a2, 9.4.0a3, 9.4.0a4, 9.4.0a5, 9.4.0a6, 9.4.0b1
9.4.0b2, 9.4.0b3, 9.4.0b4, 9.4.0rc1
BIND 9.5.0a1 (Bind Forum only)
Severity: Low
Exploitable: Remotely
Description:
It is possible for the named to dereference (read) a freed
fetch context. This can cause named to exit unintentionally.
Workaround:
Disable / restrict recursion (to limit exposure).
Fix:
Upgrade to BIND 9.2.8, BIND 9.3.4 or BIND 9.4.0rc2.
Additionally this will be fixed in the upcoming BIND 9.5.0a2.
Revision History:
|
|
Go to the Top of This SecurityTracker Archive Page
|
