| ID |
CVE-2002-0400
|
| Summary |
ISC BIND 9 before 9.2.1 allows remote attackers to cause a denial of service (shutdown) via a malformed DNS packet that triggers an error condition that is not properly handled when the rdataset parameter to the dns_message_findtype() function in message.c is not NULL, aka DoS_findtype. |
| References |
|
| Vulnerable Configurations |
-
cpe:2.3:a:isc:bind:9.0:*:*:*:*:*:*:*
cpe:2.3:a:isc:bind:9.0:*:*:*:*:*:*:*
-
cpe:2.3:a:isc:bind:9.1:*:*:*:*:*:*:*
cpe:2.3:a:isc:bind:9.1:*:*:*:*:*:*:*
-
cpe:2.3:a:isc:bind:9.1.1:*:*:*:*:*:*:*
cpe:2.3:a:isc:bind:9.1.1:*:*:*:*:*:*:*
-
cpe:2.3:a:isc:bind:9.1.2:*:*:*:*:*:*:*
cpe:2.3:a:isc:bind:9.1.2:*:*:*:*:*:*:*
-
cpe:2.3:a:isc:bind:9.1.3:*:*:*:*:*:*:*
cpe:2.3:a:isc:bind:9.1.3:*:*:*:*:*:*:*
-
cpe:2.3:a:isc:bind:9.2:*:*:*:*:*:*:*
cpe:2.3:a:isc:bind:9.2:*:*:*:*:*:*:*
|
| CVSS |
| Base: | 5.0 (as of 10-09-2008 - 19:11) |
| Impact: | |
| Exploitability: | |
|
| CWE |
NVD-CWE-Other |
| CAPEC |
|
| Access |
| Vector | Complexity | Authentication |
| NETWORK |
LOW |
NONE |
|
| Impact |
| Confidentiality | Integrity | Availability |
| NONE |
NONE |
PARTIAL |
|
| cvss-vector
via4
|
AV:N/AC:L/Au:N/C:N/I:N/A:P
|
| redhat
via4
|
|
| refmap
via4
|
| bid | 4936 | | caldera | CSSA-2002-SCO.24 | | cert | CA-2002-15 | | cert-vn | VU#739123 | | conectiva | CLA-2002:494 | | confirm | http://www.isc.org/index.pl?/sw/bind/bind-security.php | | hp | HPSBUX0207-202 | | iss | 20020604 Remote Denial of Service Vulnerability in ISC BIND | | mandrake | MDKSA-2002:038 | | suse | SuSE-SA:2002:021 | | xf | bind-findtype-dos(9250) |
|
| Last major update |
10-09-2008 - 19:11 |
| Published |
18-06-2002 - 04:00 |
| Last modified |
10-09-2008 - 19:11 |
