Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2007-0494
Modified
More InfoOfficial Page
Source-secalert@redhat.com
View Known Exploited Vulnerability (KEV) details
Published At-25 Jan, 2007 | 20:28
Updated At-11 Oct, 2017 | 01:31

ISC BIND 9.0.x, 9.1.x, 9.2.0 up to 9.2.7, 9.3.0 up to 9.3.3, 9.4.0a1 up to 9.4.0a6, 9.4.0b1 up to 9.4.0b4, 9.4.0rc1, and 9.5.0a1 (Bind Forum only) allows remote attackers to cause a denial of service (exit) via a type * (ANY) DNS query response that contains multiple RRsets, which triggers an assertion error, aka the "DNSSEC Validation" vulnerability.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Metrics
TypeVersionBase scoreBase severityVector
Primary2.04.3MEDIUM
AV:N/AC:M/Au:N/C:N/I:N/A:P
CPE Matches
Internet Systems Consortium, Inc.
isc
>>bind>>9.0
cpe:2.3:a:isc:bind:9.0:*:*:*:*:*:*:*
Internet Systems Consortium, Inc.
isc
>>bind>>9.0.0
cpe:2.3:a:isc:bind:9.0.0:rc1:*:*:*:*:*:*
Internet Systems Consortium, Inc.
isc
>>bind>>9.0.0
cpe:2.3:a:isc:bind:9.0.0:rc2:*:*:*:*:*:*
Internet Systems Consortium, Inc.
isc
>>bind>>9.0.0
cpe:2.3:a:isc:bind:9.0.0:rc3:*:*:*:*:*:*
Internet Systems Consortium, Inc.
isc
>>bind>>9.0.0
cpe:2.3:a:isc:bind:9.0.0:rc4:*:*:*:*:*:*
Internet Systems Consortium, Inc.
isc
>>bind>>9.0.0
cpe:2.3:a:isc:bind:9.0.0:rc5:*:*:*:*:*:*
Internet Systems Consortium, Inc.
isc
>>bind>>9.0.0
cpe:2.3:a:isc:bind:9.0.0:rc6:*:*:*:*:*:*
Internet Systems Consortium, Inc.
isc
>>bind>>9.0.1
cpe:2.3:a:isc:bind:9.0.1:*:*:*:*:*:*:*
Internet Systems Consortium, Inc.
isc
>>bind>>9.0.1
cpe:2.3:a:isc:bind:9.0.1:rc1:*:*:*:*:*:*
Internet Systems Consortium, Inc.
isc
>>bind>>9.0.1
cpe:2.3:a:isc:bind:9.0.1:rc2:*:*:*:*:*:*
Internet Systems Consortium, Inc.
isc
>>bind>>9.1
cpe:2.3:a:isc:bind:9.1:*:*:*:*:*:*:*
Internet Systems Consortium, Inc.
isc
>>bind>>9.1.0
cpe:2.3:a:isc:bind:9.1.0:rc1:*:*:*:*:*:*
Internet Systems Consortium, Inc.
isc
>>bind>>9.1.1
cpe:2.3:a:isc:bind:9.1.1:*:*:*:*:*:*:*
Internet Systems Consortium, Inc.
isc
>>bind>>9.1.1
cpe:2.3:a:isc:bind:9.1.1:rc1:*:*:*:*:*:*
Internet Systems Consortium, Inc.
isc
>>bind>>9.1.1
cpe:2.3:a:isc:bind:9.1.1:rc2:*:*:*:*:*:*
Internet Systems Consortium, Inc.
isc
>>bind>>9.1.1
cpe:2.3:a:isc:bind:9.1.1:rc3:*:*:*:*:*:*
Internet Systems Consortium, Inc.
isc
>>bind>>9.1.1
cpe:2.3:a:isc:bind:9.1.1:rc4:*:*:*:*:*:*
Internet Systems Consortium, Inc.
isc
>>bind>>9.1.1
cpe:2.3:a:isc:bind:9.1.1:rc5:*:*:*:*:*:*
Internet Systems Consortium, Inc.
isc
>>bind>>9.1.1
cpe:2.3:a:isc:bind:9.1.1:rc6:*:*:*:*:*:*
Internet Systems Consortium, Inc.
isc
>>bind>>9.1.1
cpe:2.3:a:isc:bind:9.1.1:rc7:*:*:*:*:*:*
Internet Systems Consortium, Inc.
isc
>>bind>>9.1.2
cpe:2.3:a:isc:bind:9.1.2:*:*:*:*:*:*:*
Internet Systems Consortium, Inc.
isc
>>bind>>9.1.2
cpe:2.3:a:isc:bind:9.1.2:rc1:*:*:*:*:*:*
Internet Systems Consortium, Inc.
isc
>>bind>>9.1.3
cpe:2.3:a:isc:bind:9.1.3:*:*:*:*:*:*:*
Internet Systems Consortium, Inc.
isc
>>bind>>9.1.3
cpe:2.3:a:isc:bind:9.1.3:rc1:*:*:*:*:*:*
Internet Systems Consortium, Inc.
isc
>>bind>>9.1.3
cpe:2.3:a:isc:bind:9.1.3:rc2:*:*:*:*:*:*
Internet Systems Consortium, Inc.
isc
>>bind>>9.1.3
cpe:2.3:a:isc:bind:9.1.3:rc3:*:*:*:*:*:*
Internet Systems Consortium, Inc.
isc
>>bind>>9.2
cpe:2.3:a:isc:bind:9.2:*:*:*:*:*:*:*
Internet Systems Consortium, Inc.
isc
>>bind>>9.2.0
cpe:2.3:a:isc:bind:9.2.0:*:*:*:*:*:*:*
Internet Systems Consortium, Inc.
isc
>>bind>>9.2.0
cpe:2.3:a:isc:bind:9.2.0:a1:*:*:*:*:*:*
Internet Systems Consortium, Inc.
isc
>>bind>>9.2.0
cpe:2.3:a:isc:bind:9.2.0:a2:*:*:*:*:*:*
Internet Systems Consortium, Inc.
isc
>>bind>>9.2.0
cpe:2.3:a:isc:bind:9.2.0:a3:*:*:*:*:*:*
Internet Systems Consortium, Inc.
isc
>>bind>>9.2.0
cpe:2.3:a:isc:bind:9.2.0:b1:*:*:*:*:*:*
Internet Systems Consortium, Inc.
isc
>>bind>>9.2.0
cpe:2.3:a:isc:bind:9.2.0:b2:*:*:*:*:*:*
Internet Systems Consortium, Inc.
isc
>>bind>>9.2.0
cpe:2.3:a:isc:bind:9.2.0:rc1:*:*:*:*:*:*
Internet Systems Consortium, Inc.
isc
>>bind>>9.2.0
cpe:2.3:a:isc:bind:9.2.0:rc10:*:*:*:*:*:*
Internet Systems Consortium, Inc.
isc
>>bind>>9.2.0
cpe:2.3:a:isc:bind:9.2.0:rc2:*:*:*:*:*:*
Internet Systems Consortium, Inc.
isc
>>bind>>9.2.0
cpe:2.3:a:isc:bind:9.2.0:rc3:*:*:*:*:*:*
Internet Systems Consortium, Inc.
isc
>>bind>>9.2.0
cpe:2.3:a:isc:bind:9.2.0:rc4:*:*:*:*:*:*
Internet Systems Consortium, Inc.
isc
>>bind>>9.2.0
cpe:2.3:a:isc:bind:9.2.0:rc5:*:*:*:*:*:*
Internet Systems Consortium, Inc.
isc
>>bind>>9.2.0
cpe:2.3:a:isc:bind:9.2.0:rc6:*:*:*:*:*:*
Internet Systems Consortium, Inc.
isc
>>bind>>9.2.0
cpe:2.3:a:isc:bind:9.2.0:rc7:*:*:*:*:*:*
Internet Systems Consortium, Inc.
isc
>>bind>>9.2.0
cpe:2.3:a:isc:bind:9.2.0:rc8:*:*:*:*:*:*
Internet Systems Consortium, Inc.
isc
>>bind>>9.2.0
cpe:2.3:a:isc:bind:9.2.0:rc9:*:*:*:*:*:*
Internet Systems Consortium, Inc.
isc
>>bind>>9.2.1
cpe:2.3:a:isc:bind:9.2.1:*:*:*:*:*:*:*
Internet Systems Consortium, Inc.
isc
>>bind>>9.2.1
cpe:2.3:a:isc:bind:9.2.1:rc1:*:*:*:*:*:*
Internet Systems Consortium, Inc.
isc
>>bind>>9.2.1
cpe:2.3:a:isc:bind:9.2.1:rc2:*:*:*:*:*:*
Internet Systems Consortium, Inc.
isc
>>bind>>9.2.2
cpe:2.3:a:isc:bind:9.2.2:*:*:*:*:*:*:*
Internet Systems Consortium, Inc.
isc
>>bind>>9.2.2
cpe:2.3:a:isc:bind:9.2.2:p2:*:*:*:*:*:*
Internet Systems Consortium, Inc.
isc
>>bind>>9.2.2
cpe:2.3:a:isc:bind:9.2.2:p3:*:*:*:*:*:*
Internet Systems Consortium, Inc.
isc
>>bind>>9.2.2
cpe:2.3:a:isc:bind:9.2.2:rc1:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
CWE-19Primarynvd@nist.gov
Evaluator Description
Evaluator Impact

Evaluator Solution

Syccessful exploitation requires that the victim has enabled dnssec validation in named.conf by specifying trusted-keys.

Vendor Statements
References
HyperlinkSourceResource
ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.ascsecalert@redhat.com
N/A
http://docs.info.apple.com/article.html?artnum=305530secalert@redhat.com
N/A
http://fedoranews.org/cms/node/2507secalert@redhat.com
N/A
http://fedoranews.org/cms/node/2537secalert@redhat.com
N/A
http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2007-003.txt.ascsecalert@redhat.com
N/A
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01070495secalert@redhat.com
N/A
http://lists.apple.com/archives/security-announce/2007/May/msg00004.htmlsecalert@redhat.com
N/A
http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.htmlsecalert@redhat.com
N/A
http://lists.suse.com/archive/suse-security-announce/2007-Jan/0016.htmlsecalert@redhat.com
N/A
http://marc.info/?l=bind-announce&m=116968519300764&w=2secalert@redhat.com
N/A
http://secunia.com/advisories/23904secalert@redhat.com
Patch
Vendor Advisory
http://secunia.com/advisories/23924secalert@redhat.com
Vendor Advisory
http://secunia.com/advisories/23943secalert@redhat.com
Vendor Advisory
http://secunia.com/advisories/23944secalert@redhat.com
Vendor Advisory
http://secunia.com/advisories/23972secalert@redhat.com
Vendor Advisory
http://secunia.com/advisories/23974secalert@redhat.com
Vendor Advisory
http://secunia.com/advisories/23977secalert@redhat.com
Vendor Advisory
http://secunia.com/advisories/24014secalert@redhat.com
Vendor Advisory
http://secunia.com/advisories/24048secalert@redhat.com
Vendor Advisory
http://secunia.com/advisories/24054secalert@redhat.com
Vendor Advisory
http://secunia.com/advisories/24083secalert@redhat.com
Vendor Advisory
http://secunia.com/advisories/24129secalert@redhat.com
Vendor Advisory
http://secunia.com/advisories/24203secalert@redhat.com
Vendor Advisory
http://secunia.com/advisories/24284secalert@redhat.com
N/A
http://secunia.com/advisories/24648secalert@redhat.com
Vendor Advisory
http://secunia.com/advisories/24930secalert@redhat.com
Vendor Advisory
http://secunia.com/advisories/24950secalert@redhat.com
Vendor Advisory
http://secunia.com/advisories/25402secalert@redhat.com
Vendor Advisory
http://secunia.com/advisories/25482secalert@redhat.com
N/A
http://secunia.com/advisories/25649secalert@redhat.com
N/A
http://secunia.com/advisories/25715secalert@redhat.com
N/A
http://secunia.com/advisories/26909secalert@redhat.com
N/A
http://secunia.com/advisories/27706secalert@redhat.com
N/A
http://security.freebsd.org/advisories/FreeBSD-SA-07:02.bind.ascsecalert@redhat.com
N/A
http://security.gentoo.org/glsa/glsa-200702-06.xmlsecalert@redhat.com
N/A
http://securitytracker.com/id?1017573secalert@redhat.com
N/A
http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.494157secalert@redhat.com
N/A
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102969-1secalert@redhat.com
N/A
http://support.avaya.com/elmodocs2/security/ASA-2007-125.htmsecalert@redhat.com
N/A
http://www-1.ibm.com/support/docview.wss?uid=isg1IY95618secalert@redhat.com
N/A
http://www-1.ibm.com/support/docview.wss?uid=isg1IY95619secalert@redhat.com
N/A
http://www-1.ibm.com/support/docview.wss?uid=isg1IY96144secalert@redhat.com
N/A
http://www-1.ibm.com/support/docview.wss?uid=isg1IY96324secalert@redhat.com
N/A
http://www.debian.org/security/2007/dsa-1254secalert@redhat.com
N/A
http://www.isc.org/index.pl?/sw/bind/bind-security.phpsecalert@redhat.com
N/A
http://www.isc.org/index.pl?/sw/bind/view/?release=9.2.8secalert@redhat.com
Patch
http://www.isc.org/index.pl?/sw/bind/view/?release=9.3.4secalert@redhat.com
Patch
http://www.mandriva.com/security/advisories?name=MDKSA-2007:030secalert@redhat.com
N/A
http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.007.htmlsecalert@redhat.com
N/A
http://www.redhat.com/support/errata/RHSA-2007-0044.htmlsecalert@redhat.com
N/A
http://www.redhat.com/support/errata/RHSA-2007-0057.htmlsecalert@redhat.com
N/A
http://www.securityfocus.com/bid/22231secalert@redhat.com
N/A
http://www.trustix.org/errata/2007/0005secalert@redhat.com
N/A
http://www.ubuntu.com/usn/usn-418-1secalert@redhat.com
N/A
http://www.vupen.com/english/advisories/2007/1401secalert@redhat.com
N/A
http://www.vupen.com/english/advisories/2007/1939secalert@redhat.com
N/A
http://www.vupen.com/english/advisories/2007/2002secalert@redhat.com
N/A
http://www.vupen.com/english/advisories/2007/2163secalert@redhat.com
N/A
http://www.vupen.com/english/advisories/2007/2245secalert@redhat.com
N/A
http://www.vupen.com/english/advisories/2007/2315secalert@redhat.com
N/A
http://www.vupen.com/english/advisories/2007/3229secalert@redhat.com
N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/31838secalert@redhat.com
N/A
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952488secalert@redhat.com
N/A
https://issues.rpath.com/browse/RPL-989secalert@redhat.com
N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11523secalert@redhat.com
N/A
https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144secalert@redhat.com
N/A
Change History
0Changes found
Details not found