[email protected]CVE-2002-1219

HistorySep 01, 2004 - 4:00 a.m.

CVE-2002-1219

2004-09-0104:00:00

[email protected]

web.nvd.nist.gov

bind

buffer overflow

remote code execution

dns

security vulnerability

7.5 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.136 Low

EPSS

Percentile

95.6%

JSON

Buffer overflow in named in BIND 4 versions 4.9.10 and earlier, and 8 versions 8.3.3 and earlier, allows remote attackers to execute arbitrary code via a certain DNS server response containing SIG resource records (RR).

Affected configurations

NVD

Node

iscbindMatch4.9.5

iscbindMatch4.9.6

iscbindMatch4.9.7

iscbindMatch4.9.8

iscbindMatch4.9.9

iscbindMatch4.9.10

iscbindMatch8.2

iscbindMatch8.2.1

iscbindMatch8.2.2

iscbindMatch8.2.3

iscbindMatch8.2.4

iscbindMatch8.2.5

iscbindMatch8.2.6

iscbindMatch8.3.0

iscbindMatch8.3.1

iscbindMatch8.3.2

iscbindMatch8.3.3

Node

freebsdfreebsdMatch4.4

freebsdfreebsdMatch4.5

freebsdfreebsdMatch4.6

freebsdfreebsdMatch4.7

openbsdopenbsdMatch3.0

openbsdopenbsdMatch3.1

openbsdopenbsdMatch3.2

CPENameOperatorVersion
isc:bindisc bindeq4.9.5
isc:bindisc bindeq4.9.6
isc:bindisc bindeq4.9.7
isc:bindisc bindeq4.9.8
isc:bindisc bindeq4.9.9
isc:bindisc bindeq4.9.10
isc:bindisc bindeq8.2
isc:bindisc bindeq8.2.1
isc:bindisc bindeq8.2.2
isc:bindisc bindeq8.2.3

CPE	Name	Operator	Version
isc:bind	isc bind	eq	4.9.5
isc:bind	isc bind	eq	4.9.6
isc:bind	isc bind	eq	4.9.7
isc:bind	isc bind	eq	4.9.8
isc:bind	isc bind	eq	4.9.9
isc:bind	isc bind	eq	4.9.10
isc:bind	isc bind	eq	8.2
isc:bind	isc bind	eq	8.2.1
isc:bind	isc bind	eq	8.2.2
isc:bind	isc bind	eq	8.2.3