CVE-2003-0914

2003-12-1505:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

isc bind

cve-2003-0914

cache poisoning

dns

security vulnerability

nvd

6.3 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.02 Low

EPSS

Percentile

88.9%

JSON

ISC BIND 8.3.x before 8.3.7, and 8.4.x before 8.4.3, allows remote attackers to poison the cache via a malicious name server that returns negative responses with a large TTL (time-to-live) value.

CPENameOperatorVersion
isc:bindisc bindeq8.4.1
isc:bindisc bindeq8.2.5
isc:bindisc bindeq8.3.1
isc:bindisc bindeq8.3.2
nixu:namesurfernixu namesurfereqsuite_3.0.1
isc:bindisc bindeq8.3.4
isc:bindisc bindeq8.2.7
isc:bindisc bindeq8.2.4
isc:bindisc bindeq8.2.6
isc:bindisc bindeq8.3.5

CPE	Name	Operator	Version
isc:bind	isc bind	eq	8.4.1
isc:bind	isc bind	eq	8.2.5
isc:bind	isc bind	eq	8.3.1
isc:bind	isc bind	eq	8.3.2
nixu:namesurfer	nixu namesurfer	eq	suite_3.0.1
isc:bind	isc bind	eq	8.3.4
isc:bind	isc bind	eq	8.2.7
isc:bind	isc bind	eq	8.2.4
isc:bind	isc bind	eq	8.2.6
isc:bind	isc bind	eq	8.3.5