Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-706-1
HistoryJan 09, 2009 - 12:00 a.m.

Bind vulnerability

2009-01-0900:00:00
ubuntu.com
42

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.7 High

AI Score

Confidence

High

0.019 Low

EPSS

Percentile

88.4%

JSON

Releases

  • Ubuntu 8.10
  • Ubuntu 8.04
  • Ubuntu 7.10
  • Ubuntu 6.06

Packages

  • bind9 -

Details

It was discovered that Bind did not properly perform signature verification.
When DNSSEC with DSA signatures are in use, a remote attacker could exploit
this to bypass signature validation to spoof DNS entries and poison DNS
caches. Among other things, this could lead to misdirected email and web
traffic.

OSVersionArchitecturePackageVersionFilename
Ubuntu8.10noarchlibdns43< 1:9.5.0.dfsg.P2-1ubuntu3.1UNKNOWN
Ubuntu8.10noarchbind9< 1:9.5.0.dfsg.P2-1ubuntu3.1UNKNOWN
Ubuntu8.10noarchbind9< host-1:9.5.0.dfsg.P2-1ubuntu3.1UNKNOWN
Ubuntu8.10noarchbind9< tils-1:9.5.0.dfsg.P2-1ubuntu3.1UNKNOWN
Ubuntu8.10noarchdnsutils< 1:9.5.0.dfsg.P2-1ubuntu3.1UNKNOWN
Ubuntu8.10noarchlibbind-dev< 1:9.5.0.dfsg.P2-1ubuntu3.1UNKNOWN
Ubuntu8.10noarchlibbind9-40< 1:9.5.0.dfsg.P2-1ubuntu3.1UNKNOWN
Ubuntu8.10noarchlibisc44< 1:9.5.0.dfsg.P2-1ubuntu3.1UNKNOWN
Ubuntu8.10noarchlibisccc40< 1:9.5.0.dfsg.P2-1ubuntu3.1UNKNOWN
Ubuntu8.10noarchlibisccfg40< 1:9.5.0.dfsg.P2-1ubuntu3.1UNKNOWN
Rows per page:
1-10 of 451

Related

oraclelinux 1
nessus 35
suse 1
openvas 43
centos 2
veracode 1
redhat 1
freebsd_advisory 1
debian 1
fedora 3
cve 2
slackware 1
ubuntucve 2
debiancve 2
prion 2
cvelist 2
gentoo 1
nvd 2
f5 6
redhatcve 1
securityvulns 3
vmware 2
oraclelinux
oraclelinux
bind security update
2009-01-08 00:00:00
nessus
nessus
openSUSE Security Update : bind (bind-426)
2009-07-21 00:00:00
Mandriva Linux Security Advisory : bind (MDVSA-2009:002)
2009-04-23 00:00:00
Fedora 9 : bind-9.5.1-1.P1.fc9 (2009-0350)
2009-01-16 00:00:00
suse
suse
information disclosure in bind
2009-01-22 12:03:42
openvas
openvas
CentOS Update for bind CESA-2009:0020 centos4 i386
2011-08-09 00:00:00
CentOS Security Advisory CESA-2009:0020 (bind)
2009-01-13 00:00:00
FreeBSD Security Advisory (FreeBSD-SA-09:04.bind.asc)
2009-01-20 00:00:00
centos
centos
bind, caching security update
2009-01-09 23:08:18
bind security update
2009-02-02 23:32:53
veracode
veracode
DSA Certificate Validation Bypass
2020-04-10 00:34:40
redhat
redhat
(RHSA-2009:0020) Moderate: bind security update
2009-01-08 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-09:04.bind
2009-01-13 00:00:00
debian
debian
[SECURITY] [DSA 1703-1] New bind9 packages fix cryptographic weakness
2009-01-12 21:27:18
fedora
fedora
[SECURITY] Fedora 10 Update: bind-9.5.1-1.P1.fc10
2009-01-15 02:59:44
[SECURITY] Fedora 9 Update: bind-9.5.1-1.P1.fc9
2009-01-15 02:51:25
[SECURITY] Fedora 10 Update: bind-9.5.1-3.P3.fc10
2009-07-30 03:55:44
cve
cve
CVE-2009-0025
2009-01-07 17:30:00
CVE-2009-0265
2009-01-26 15:30:04
slackware
slackware
bind
2009-01-14 23:14:51
ubuntucve
ubuntucve
CVE-2009-0025
2009-01-07 00:00:00
CVE-2009-0265
2009-01-26 00:00:00
debiancve
debiancve
CVE-2009-0025
2009-01-07 17:30:00
CVE-2009-0265
2009-01-26 15:30:04
prion
prion
Input validation
2009-01-07 17:30:00
Input validation
2009-01-26 15:30:00
cvelist
cvelist
CVE-2009-0025
2009-01-07 17:00:00
CVE-2009-0265
2009-01-26 15:05:00
gentoo
gentoo
BIND: Incorrect signature verification
2009-03-09 00:00:00
nvd
nvd
CVE-2009-0025
2009-01-07 17:30:00
CVE-2009-0265
2009-01-26 15:30:04
f5
f5
SOL11503 - BIND 9 vulnerability CVE-2009-0265
2010-05-10 00:00:00
K9762 : OpenSSL vulnerability - CVE-2008-5077
2014-05-30 00:00:00
K9754 : BIND 9 vulnerability CVE-2009-0025
2013-03-25 00:00:00
redhatcve
redhatcve
CVE-2009-0265
2015-10-30 10:33:33
securityvulns
securityvulns
[oCERT-2008-016] Multiple OpenSSL signature verification API misuses
2009-01-09 00:00:00
OpenSSL / ntp / bind / boinc certificate validation cryptographic vulnerabilities
2009-02-10 00:00:00
About the security content of Security Update 2009-002 / Mac OS X v10.5.7
2009-05-14 00:00:00
vmware
vmware
ESX Service Console updates for openssl, bind, and vim
2009-03-31 00:00:00
ESX Service Console updates for openssl, bind, and vim
2009-03-31 00:00:00

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.7 High

AI Score

Confidence

High

0.019 Low

EPSS

Percentile

88.4%

JSON
Related for USN-706-1
oraclelinux1nessus35suse1openvas43centos2veracode1redhat1freebsd_advisory1debian1fedora3cve2slackware1ubuntucve2debiancve2prion2cvelist2gentoo1nvd2f56redhatcve1securityvulns3vmware2