CVE-2002-0400

Severity

50%

Complexity

99%

Confidentiality

48%

ISC BIND 9 before 9.2.1 allows remote attackers to cause a denial of service (shutdown) via a malformed DNS packet that triggers an error condition that is not properly handled when the rdataset parameter to the dns_message_findtype() function in message.c is not NULL, aka DoS_findtype.

ISC BIND 9 before 9.2.1 allows remote attackers to cause a denial of service (shutdown) via a malformed DNS packet that triggers an error condition that is not properly handled when the rdataset parameter to the dns_message_findtype() function in message.c is not NULL, aka DoS_findtype.

CVSS 2.0 Base Score 5. CVSS Attack Vector: network. CVSS Attack Complexity: low. CVSS Vector: (AV:N/AC:L/Au:N/C:N/I:N/A:P).

Overview

Type

ISC BIND

First reported 23 years ago

2002-06-18 04:00:00

Last updated 16 years ago

2008-09-10 19:11:00

Affected Software

ISC BIND 9.0

9.0

ISC BIND 9.1

9.1

ISC BIND 9.1.1

9.1.1

ISC BIND 9.1.2

9.1.2

ISC BIND 9.1.3

9.1.3

ISC BIND 9.2

9.2

References

CSSA-2002-SCO.24

HPSBUX0207-202

CLA-2002:494

MDKSA-2002:038

CA-2002-15

Patch, Third Party Advisory, US Government Resource

http://www.isc.org/index.pl?/sw/bind/bind-security.php

bind-findtype-dos(9250)

Vendor Advisory

VU#739123

Patch, Third Party Advisory, US Government Resource

SuSE-SA:2002:021

RHSA-2002:105

RHSA-2002:119

RHSA-2003:154

4936

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.