Lucene search

MitreCVE-2002-0651

HistorySep 01, 2004 - 4:00 a.m.

CVE-2002-0651

2004-09-0104:00:00

mitre

web.nvd.nist.gov

412

cve-2002-0651

buffer overflow

dns resolver

denial of service

arbitrary code execution

nvd

isc bind

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

9.8

Confidence

High

EPSS

0.036

Percentile

91.8%

JSON

Buffer overflow in the DNS resolver code used in libc, glibc, and libbind, as derived from ISC BIND, allows remote malicious DNS servers to cause a denial of service and possibly execute arbitrary code via the stub resolvers.

Affected configurations

Nvd

Node

iscbindMatch9.4.0

VendorProductVersionCPE
iscbind9.4.0cpe:2.3:a:isc:bind:9.4.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
isc	bind	9.4.0	cpe:2.3:a:isc:bind:9.4.0:::::::*

References

ftp://ftp.caldera.com/pub/updates/OpenServer/CSSA-2002-SCO.39

ftp://ftp.caldera.com/pub/updates/UnixWare/CSSA-2002-SCO.37

ftp://ftp.NetBSD.ORG/pub/NetBSD/security/advisories/NetBSD-SA2002-006.txt.asc

ftp://patches.sgi.com/support/free/security/advisories/20020701-01-I/

archives.neohapsis.com/archives/aix/2002-q3/0001.html

archives.neohapsis.com/archives/linux/engarde/2002-q3/0002.html

archives.neohapsis.com/archives/ntbugtraq/2002-q3/0000.html

distro.conectiva.com/atualizacoes/?id=a&anuncio=000507

frontal2.mandriva.com/security/advisories?name=MDKSA-2002:038

marc.info/?l=bugtraq&m=102513011311504&w=2

marc.info/?l=bugtraq&m=102520962320134&w=2

marc.info/?l=bugtraq&m=102579743329251&w=2

rhn.redhat.com/errata/RHSA-2002-139.html

www.cert.org/advisories/CA-2002-19.html

www.iss.net/security_center/static/9432.php

www.kb.cert.org/vuls/id/803539

www.linux-mandrake.com/en/security/2002/MDKSA-2002-043.php

www.pine.nl/advisories/pine-cert-20020601.txt

www.redhat.com/support/errata/RHSA-2002-119.html

www.redhat.com/support/errata/RHSA-2002-133.html

www.redhat.com/support/errata/RHSA-2002-167.html

www.redhat.com/support/errata/RHSA-2003-154.html

www.securityfocus.com/bid/5100

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4190

Social References

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

9.8

Confidence

High

EPSS

0.036

Percentile

91.8%

JSON

Related for CVE-2002-0651