Anfälligkeitssuche        Suche in 219043 CVE Beschreibungen
und 99761 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.100831
Kategorie:Denial of Service
Titel:ISC BIND Denial Of Service and Security Bypass Vulnerability
Zusammenfassung:ISC BIND is prone to a security-bypass vulnerability and a denial-of-; service vulnerability.
Beschreibung:Summary:
ISC BIND is prone to a security-bypass vulnerability and a denial-of-
service vulnerability.

Vulnerability Impact:
Successfully exploiting these issues allows remote attackers to crash
affected DNS servers, denying further service to legitimate users, bypass certain security restrictions
and perform unauthorized actions. Other attacks are also possible.

Affected Software/OS:
ISC BIND versions 9.7.2 through 9.7.2-P1 are vulnerable.

Solution:
Vendor updates are available. Please see the references for more
information.

CVSS Score:
5.0

CVSS Vector:
AV:N/AC:L/Au:N/C:P/I:N/A:N

Querverweis: BugTraq ID: 43573
Common Vulnerability Exposure (CVE) ID: CVE-2010-0218
CERT/CC vulnerability note: VU#784855
http://www.kb.cert.org/vuls/id/784855
https://lists.isc.org/pipermail/bind-announce/2010-September/000655.html
Common Vulnerability Exposure (CVE) ID: CVE-2010-3762
BugTraq ID: 45385
http://www.securityfocus.com/bid/45385
Bugtraq: 20110308 VMSA-2011-0004 VMware ESX/ESXi SLPD denial of service vulnerability and ESX third party updates for Service Console packages bind, pam, and rpm. (Google Search)
http://www.securityfocus.com/archive/1/516909/100/0/threaded
Debian Security Information: DSA-2130 (Google Search)
http://www.debian.org/security/2010/dsa-2130
http://www.mandriva.com/security/advisories?name=MDVSA-2010:253
http://lists.vmware.com/pipermail/security-announce/2011/000126.html
http://www.redhat.com/support/errata/RHSA-2010-0976.html
http://www.vupen.com/english/advisories/2011/0606
CopyrightCopyright (C) 2010 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2024 E-Soft Inc. Alle Rechte vorbehalten.