{"id": "CVE-2010-0382", "bulletinFamily": "NVD", "title": "CVE-2010-0382", "description": "ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta handles out-of-bailiwick data accompanying a secure response without re-fetching from the original source, which allows remote attackers to have an unspecified impact via a crafted response, aka Bug 20819. NOTE: this vulnerability exists because of a regression during the fix for CVE-2009-4022.", "published": "2010-01-22T17:00:00", "modified": "2017-09-18T21:30:22", "cvss": {"score": 7.6, "vector": "AV:NETWORK/AC:HIGH/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-0382", "reporter": "NVD", "references": ["http://www.vupen.com/english/advisories/2010/0622", "http://www.debian.org/security/2010/dsa-2054", "http://www.vupen.com/english/advisories/2010/1352", "http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0018", "https://www.isc.org/advisories/CVE-2009-4022v6"], "cvelist": ["CVE-2010-0382"], "type": "cve", "lastseen": "2017-09-19T13:36:51", "history": [{"bulletin": {"assessment": {"href": "http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11753", "name": "oval:org.mitre.oval:def:11753", "system": "http://oval.mitre.org/XMLSchema/oval-definitions-5"}, "bulletinFamily": "NVD", "cpe": ["cpe:/a:isc:bind:9.1.1:rc4", "cpe:/a:isc:bind:9.2.0:rc10", "cpe:/a:isc:bind:9.10.0:b1", "cpe:/a:isc:bind:9.3.1", "cpe:/a:isc:bind:9.3.0", "cpe:/a:isc:bind:9.4.0:a3", "cpe:/a:isc:bind:9.10.0:rc2", "cpe:/a:isc:bind:9.2.7", "cpe:/a:isc:bind:9.3.3:rc3", "cpe:/a:isc:bind:9.2.6", "cpe:/a:isc:bind:9.0", "cpe:/a:isc:bind:9.10.1:rc1", "cpe:/a:isc:bind:9.2.0:rc5", "cpe:/a:isc:bind:9.2.4:rc5", "cpe:/a:isc:bind:9.2.1:rc2", "cpe:/a:isc:bind:9.7.0:b1", "cpe:/a:isc:bind:9.3.3:rc1", "cpe:/a:isc:bind:9.1.1", "cpe:/a:isc:bind:9.3.0:b4", "cpe:/a:isc:bind:9.4.0:a5", "cpe:/a:isc:bind:9.10.1:b1", "cpe:/a:isc:bind:9.1.1:rc5", "cpe:/a:isc:bind:9.4.3:b1", "cpe:/a:isc:bind:9.4.3:p4", "cpe:/a:isc:bind:9.10.1:p2", "cpe:/a:isc:bind:9.2.0:rc6", "cpe:/a:isc:bind:9.10.3:p1", "cpe:/a:isc:bind:9.4.0:a4", "cpe:/a:isc:bind:9.6.0:rc2", "cpe:/a:isc:bind:9.10.3:p2", "cpe:/a:isc:bind:9.4.0:rc1", "cpe:/a:isc:bind:9.2.0:rc2", "cpe:/a:isc:bind:9.1.3:rc2", "cpe:/a:isc:bind:9.10.0:p2", "cpe:/a:isc:bind:9.2.3:rc2", "cpe:/a:isc:bind:9.2.2:rc1", "cpe:/a:isc:bind:9.2.0:a1", "cpe:/a:isc:bind:9.1.2:rc1", "cpe:/a:isc:bind:9.1.1:rc6", "cpe:/a:isc:bind:9.4.1", "cpe:/a:isc:bind:9.10.1:rc2", "cpe:/a:isc:bind:9.0.1:rc1", "cpe:/a:isc:bind:9.3.2", "cpe:/a:isc:bind:9.2.4:rc7", "cpe:/a:isc:bind:9.3.4", "cpe:/a:isc:bind:9.10.1", "cpe:/a:isc:bind:9.10.2:p4", "cpe:/a:isc:bind:9.0.0:rc3", "cpe:/a:isc:bind:9.6.1:rc1", "cpe:/a:isc:bind:9.1.0:rc1", "cpe:/a:isc:bind:9.2.0:rc1", "cpe:/a:isc:bind:9.6.1:p1", "cpe:/a:isc:bind:9.6.0", "cpe:/a:isc:bind:9.6.0:p1", "cpe:/a:isc:bind:9.2.4:rc2", "cpe:/a:isc:bind:9.0.0:rc2", "cpe:/a:isc:bind:9.10.0:rc1", "cpe:/a:isc:bind:9.2.4:rc8", "cpe:/a:isc:bind:9.10.1:b2", "cpe:/a:isc:bind:9.3.0:rc2", "cpe:/a:isc:bind:9.0.0:rc1", "cpe:/a:isc:bind:9.2.0:rc4", "cpe:/a:isc:bind:9.4.0:a2", "cpe:/a:isc:bind:9.2.0:b2", "cpe:/a:isc:bind:9.3.6", "cpe:/a:isc:bind:9.2.0:rc8", "cpe:/a:isc:bind:9.4.3:b2", "cpe:/a:isc:bind:9.10.2:rc1", "cpe:/a:isc:bind:9.10.0:p1", "cpe:/a:isc:bind:9.4.3:rc1", "cpe:/a:isc:bind:9.3.5:rc2", "cpe:/a:isc:bind:9.3.0:rc4", "cpe:/a:isc:bind:9.6.0:rc1", "cpe:/a:isc:bind:9.3.6:rc1", "cpe:/a:isc:bind:9.4.3:p5", "cpe:/a:isc:bind:9.4.0:b4", "cpe:/a:isc:bind:9.3.2:rc1", "cpe:/a:isc:bind:9.2.3:rc3", "cpe:/a:isc:bind:9.4.0:b3", "cpe:/a:isc:bind:9.4.2", "cpe:/a:isc:bind:9.4.3:p3", "cpe:/a:isc:bind:9.10.2:rc2", "cpe:/a:isc:bind:9.1.3:rc3", "cpe:/a:isc:bind:9.1.3", "cpe:/a:isc:bind:9.10.2:p3", "cpe:/a:isc:bind:9.10.1:p1", "cpe:/a:isc:bind:9.3.0:rc3", "cpe:/a:isc:bind:9.1", "cpe:/a:isc:bind:9.4.0:rc2", "cpe:/a:isc:bind:9.10.3:p3", "cpe:/a:isc:bind:9.2.9", "cpe:/a:isc:bind:9.10.3:b1", "cpe:/a:isc:bind:9.3.0:b3", "cpe:/a:isc:bind:9.2.7:rc1", "cpe:/a:isc:bind:9.2.0:rc7", "cpe:/a:isc:bind:9.1.2", "cpe:/a:isc:bind:9.2.5", "cpe:/a:isc:bind:9.2.4:rc6", "cpe:/a:isc:bind:9.0.0:rc6", "cpe:/a:isc:bind:9.3", "cpe:/a:isc:bind:9.3.0:b2", "cpe:/a:isc:bind:9.1.1:rc3", "cpe:/a:isc:bind:9.0.0:rc5", "cpe:/a:isc:bind:9.6.1", "cpe:/a:isc:bind:9.2.0", "cpe:/a:isc:bind:9.4.0", "cpe:/a:isc:bind:9.2", "cpe:/a:isc:bind:9.2.6:rc1", "cpe:/a:isc:bind:9.3.5:rc1", "cpe:/a:isc:bind:9.4.3:p1", "cpe:/a:isc:bind:9.6.1:b1", "cpe:/a:isc:bind:9.6.1:p2", "cpe:/a:isc:bind:9.3.1:b2", "cpe:/a:isc:bind:9.1.1:rc1", "cpe:/a:isc:bind:9.2.8", "cpe:/a:isc:bind:9.2.5:b2", "cpe:/a:isc:bind:9.2.0:a3", "cpe:/a:isc:bind:9.4.3:p2", "cpe:/a:isc:bind:9.3.3:rc2", "cpe:/a:isc:bind:9.2.0:a2", "cpe:/a:isc:bind:9.2.0:b1", "cpe:/a:isc:bind:9.4.0:a1", "cpe:/a:isc:bind:9.1.1:rc2", "cpe:/a:isc:bind:9.4.2:rc2", "cpe:/a:isc:bind:9.10.0", "cpe:/a:isc:bind:9.10.2:p2", "cpe:/a:isc:bind:9.2.5:rc1", "cpe:/a:isc:bind:9.3.3", "cpe:/a:isc:bind:9.3.1:rc1", "cpe:/a:isc:bind:9.2.4:rc4", "cpe:/a:isc:bind:9.10.0:a2", "cpe:/a:isc:bind:9.6.0:a1", "cpe:/a:isc:bind:9.10.0:a1", "cpe:/a:isc:bind:9.4.0:a6", "cpe:/a:isc:bind:9.4", "cpe:/a:isc:bind:9.1.1:rc7", "cpe:/a:isc:bind:9.2.3", "cpe:/a:isc:bind:9.2.7:rc3", "cpe:/a:isc:bind:9.4.0:b2", "cpe:/a:isc:bind:9.4.3", "cpe:/a:isc:bind:9.3.0:rc1", "cpe:/a:isc:bind:9.6.0:b1", "cpe:/a:isc:bind:9.2.3:rc1", "cpe:/a:isc:bind:9.2.3:rc4", "cpe:/a:isc:bind:9.2.4:rc3", "cpe:/a:isc:bind:9.2.0:rc3", "cpe:/a:isc:bind:9.2.7:rc2", "cpe:/a:isc:bind:9.0.1", "cpe:/a:isc:bind:9.3.5", "cpe:/a:isc:bind:9.2.2:p3", "cpe:/a:isc:bind:9.10.3:rc1", "cpe:/a:isc:bind:9.2.9:rc1", "cpe:/a:isc:bind:9.10.2:b1", "cpe:/a:isc:bind:9.10.2:p1", "cpe:/a:isc:bind:9.4.2:rc1", "cpe:/a:isc:bind:9.4.3:b3", "cpe:/a:isc:bind:9.2.1:rc1", "cpe:/a:isc:bind:9.2.4", "cpe:/a:isc:bind:9.10.3", "cpe:/a:isc:bind:9.1.3:rc1", "cpe:/a:isc:bind:9.4.0:b1", "cpe:/a:isc:bind:9.2.0:rc9", "cpe:/a:isc:bind:9.2.2:p2", "cpe:/a:isc:bind:9.2.2", "cpe:/a:isc:bind:9.10.0:b2", "cpe:/a:isc:bind:9.0.0:rc4", "cpe:/a:isc:bind:9.0.1:rc2", "cpe:/a:isc:bind:9.2.1"], "cvelist": ["CVE-2010-0382"], "cvss": {"score": 7.6, "vector": "AV:NETWORK/AC:HIGH/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "description": "ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta handles out-of-bailiwick data accompanying a secure response without re-fetching from the original source, which allows remote attackers to have an unspecified impact via a crafted response, aka Bug 20819. NOTE: this vulnerability exists because of a regression during the fix for CVE-2009-4022.", "edition": 1, "enchantments": {}, "hash": "9dec4d3ab3542cfaba1d3c4fcab574f9db65d7a71e2d38daa4f4a2fbf319207d", "hashmap": [{"hash": "601892ece72be3be2f57266ca2354792", "key": "reporter"}, {"hash": "6b3bb7be3b959a65a8145293fbfa3060", "key": "href"}, {"hash": "1c907da64a09f00817465b4a93444a48", "key": "description"}, {"hash": "b3db5e15e628f8a0f2631749a593d7bc", "key": "assessment"}, {"hash": "2f42fe0e0a1d3831c537174657abff90", "key": "cpe"}, {"hash": "7525308e85470258a47d743391244c3d", "key": "title"}, {"hash": "028ec48af74edd1f50fc150df1d1bd30", "key": "published"}, {"hash": "8c101e45eefd566e051a1f5dde037788", "key": "modified"}, {"hash": "774fce555a963c00be305187dd6dff95", "key": "cvss"}, {"hash": "1716b5fcbb7121af74efdc153d0166c5", "key": "type"}, {"hash": "796ba7ff35bd8ab1a9413c1e05adc80c", "key": "references"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "bulletinFamily"}, {"hash": "f1b5641a27e84a6c264e15465fead2e6", "key": "scanner"}, {"hash": "af06a720b3d7f0a34ca2c7a2a31134d0", "key": "cvelist"}], "history": [], "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-0382", "id": "CVE-2010-0382", "lastseen": "2016-09-03T13:29:06", "modified": "2016-04-04T10:28:21", "objectVersion": "1.2", "published": "2010-01-22T17:00:00", "references": ["http://www.vupen.com/english/advisories/2010/0622", "http://www.debian.org/security/2010/dsa-2054", "http://www.vupen.com/english/advisories/2010/1352", "http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0018", "https://www.isc.org/advisories/CVE-2009-4022v6"], "reporter": "NVD", "scanner": [{"href": "http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:6665", "name": "oval:org.mitre.oval:def:6665", "system": "http://oval.mitre.org/XMLSchema/oval-definitions-5"}], "title": "CVE-2010-0382", "type": "cve", "viewCount": 0}, "differentElements": ["assessment", "modified"], "edition": 1, "lastseen": "2016-09-03T13:29:06"}], "edition": 2, "hashmap": [{"key": "assessment", "hash": "06fcc9dbe829286f34cb34ef9d8a1670"}, {"key": "bulletinFamily", "hash": "601892ece72be3be2f57266ca2354792"}, {"key": "cpe", "hash": "2f42fe0e0a1d3831c537174657abff90"}, {"key": "cvelist", "hash": "af06a720b3d7f0a34ca2c7a2a31134d0"}, {"key": "cvss", "hash": "774fce555a963c00be305187dd6dff95"}, {"key": "description", "hash": "1c907da64a09f00817465b4a93444a48"}, {"key": "href", "hash": "6b3bb7be3b959a65a8145293fbfa3060"}, {"key": "modified", "hash": "6e5c7ea0fb3a993570db3d435c5a6ecc"}, {"key": "published", "hash": "028ec48af74edd1f50fc150df1d1bd30"}, {"key": "references", "hash": "796ba7ff35bd8ab1a9413c1e05adc80c"}, {"key": "reporter", "hash": "601892ece72be3be2f57266ca2354792"}, {"key": "scanner", "hash": "f1b5641a27e84a6c264e15465fead2e6"}, {"key": "title", "hash": "7525308e85470258a47d743391244c3d"}, {"key": "type", "hash": "1716b5fcbb7121af74efdc153d0166c5"}], "hash": "8001813668a53953ec5e91329aef356211edb1d2efc0f56212a20744d9b593f9", "viewCount": 1, "enchantments": {"vulnersScore": 6.8}, "objectVersion": "1.3", "cpe": ["cpe:/a:isc:bind:9.1.1:rc4", "cpe:/a:isc:bind:9.2.0:rc10", "cpe:/a:isc:bind:9.10.0:b1", "cpe:/a:isc:bind:9.3.1", "cpe:/a:isc:bind:9.3.0", "cpe:/a:isc:bind:9.4.0:a3", "cpe:/a:isc:bind:9.10.0:rc2", "cpe:/a:isc:bind:9.2.7", "cpe:/a:isc:bind:9.3.3:rc3", "cpe:/a:isc:bind:9.2.6", "cpe:/a:isc:bind:9.0", "cpe:/a:isc:bind:9.10.1:rc1", "cpe:/a:isc:bind:9.2.0:rc5", "cpe:/a:isc:bind:9.2.4:rc5", "cpe:/a:isc:bind:9.2.1:rc2", "cpe:/a:isc:bind:9.7.0:b1", "cpe:/a:isc:bind:9.3.3:rc1", "cpe:/a:isc:bind:9.1.1", "cpe:/a:isc:bind:9.3.0:b4", "cpe:/a:isc:bind:9.4.0:a5", "cpe:/a:isc:bind:9.10.1:b1", "cpe:/a:isc:bind:9.1.1:rc5", "cpe:/a:isc:bind:9.4.3:b1", "cpe:/a:isc:bind:9.4.3:p4", "cpe:/a:isc:bind:9.10.1:p2", "cpe:/a:isc:bind:9.2.0:rc6", "cpe:/a:isc:bind:9.10.3:p1", "cpe:/a:isc:bind:9.4.0:a4", "cpe:/a:isc:bind:9.6.0:rc2", "cpe:/a:isc:bind:9.10.3:p2", "cpe:/a:isc:bind:9.4.0:rc1", "cpe:/a:isc:bind:9.2.0:rc2", "cpe:/a:isc:bind:9.1.3:rc2", "cpe:/a:isc:bind:9.10.0:p2", "cpe:/a:isc:bind:9.2.3:rc2", "cpe:/a:isc:bind:9.2.2:rc1", "cpe:/a:isc:bind:9.2.0:a1", "cpe:/a:isc:bind:9.1.2:rc1", "cpe:/a:isc:bind:9.1.1:rc6", "cpe:/a:isc:bind:9.4.1", "cpe:/a:isc:bind:9.10.1:rc2", "cpe:/a:isc:bind:9.0.1:rc1", "cpe:/a:isc:bind:9.3.2", "cpe:/a:isc:bind:9.2.4:rc7", "cpe:/a:isc:bind:9.3.4", "cpe:/a:isc:bind:9.10.1", "cpe:/a:isc:bind:9.10.2:p4", "cpe:/a:isc:bind:9.0.0:rc3", "cpe:/a:isc:bind:9.6.1:rc1", "cpe:/a:isc:bind:9.1.0:rc1", "cpe:/a:isc:bind:9.2.0:rc1", "cpe:/a:isc:bind:9.6.1:p1", "cpe:/a:isc:bind:9.6.0", "cpe:/a:isc:bind:9.6.0:p1", "cpe:/a:isc:bind:9.2.4:rc2", "cpe:/a:isc:bind:9.0.0:rc2", "cpe:/a:isc:bind:9.10.0:rc1", "cpe:/a:isc:bind:9.2.4:rc8", "cpe:/a:isc:bind:9.10.1:b2", "cpe:/a:isc:bind:9.3.0:rc2", "cpe:/a:isc:bind:9.0.0:rc1", "cpe:/a:isc:bind:9.2.0:rc4", "cpe:/a:isc:bind:9.4.0:a2", "cpe:/a:isc:bind:9.2.0:b2", "cpe:/a:isc:bind:9.3.6", "cpe:/a:isc:bind:9.2.0:rc8", "cpe:/a:isc:bind:9.4.3:b2", "cpe:/a:isc:bind:9.10.2:rc1", "cpe:/a:isc:bind:9.10.0:p1", "cpe:/a:isc:bind:9.4.3:rc1", "cpe:/a:isc:bind:9.3.5:rc2", "cpe:/a:isc:bind:9.3.0:rc4", "cpe:/a:isc:bind:9.6.0:rc1", "cpe:/a:isc:bind:9.3.6:rc1", "cpe:/a:isc:bind:9.4.3:p5", "cpe:/a:isc:bind:9.4.0:b4", "cpe:/a:isc:bind:9.3.2:rc1", "cpe:/a:isc:bind:9.2.3:rc3", "cpe:/a:isc:bind:9.4.0:b3", "cpe:/a:isc:bind:9.4.2", "cpe:/a:isc:bind:9.4.3:p3", "cpe:/a:isc:bind:9.10.2:rc2", "cpe:/a:isc:bind:9.1.3:rc3", "cpe:/a:isc:bind:9.1.3", "cpe:/a:isc:bind:9.10.2:p3", "cpe:/a:isc:bind:9.10.1:p1", "cpe:/a:isc:bind:9.3.0:rc3", "cpe:/a:isc:bind:9.1", "cpe:/a:isc:bind:9.4.0:rc2", "cpe:/a:isc:bind:9.10.3:p3", "cpe:/a:isc:bind:9.2.9", "cpe:/a:isc:bind:9.10.3:b1", "cpe:/a:isc:bind:9.3.0:b3", "cpe:/a:isc:bind:9.2.7:rc1", "cpe:/a:isc:bind:9.2.0:rc7", "cpe:/a:isc:bind:9.1.2", "cpe:/a:isc:bind:9.2.5", "cpe:/a:isc:bind:9.2.4:rc6", "cpe:/a:isc:bind:9.0.0:rc6", "cpe:/a:isc:bind:9.3", "cpe:/a:isc:bind:9.3.0:b2", "cpe:/a:isc:bind:9.1.1:rc3", "cpe:/a:isc:bind:9.0.0:rc5", "cpe:/a:isc:bind:9.6.1", "cpe:/a:isc:bind:9.2.0", "cpe:/a:isc:bind:9.4.0", "cpe:/a:isc:bind:9.2", "cpe:/a:isc:bind:9.2.6:rc1", "cpe:/a:isc:bind:9.3.5:rc1", "cpe:/a:isc:bind:9.4.3:p1", "cpe:/a:isc:bind:9.6.1:b1", "cpe:/a:isc:bind:9.6.1:p2", "cpe:/a:isc:bind:9.3.1:b2", "cpe:/a:isc:bind:9.1.1:rc1", "cpe:/a:isc:bind:9.2.8", "cpe:/a:isc:bind:9.2.5:b2", "cpe:/a:isc:bind:9.2.0:a3", "cpe:/a:isc:bind:9.4.3:p2", "cpe:/a:isc:bind:9.3.3:rc2", "cpe:/a:isc:bind:9.2.0:a2", "cpe:/a:isc:bind:9.2.0:b1", "cpe:/a:isc:bind:9.4.0:a1", "cpe:/a:isc:bind:9.1.1:rc2", "cpe:/a:isc:bind:9.4.2:rc2", "cpe:/a:isc:bind:9.10.0", "cpe:/a:isc:bind:9.10.2:p2", "cpe:/a:isc:bind:9.2.5:rc1", "cpe:/a:isc:bind:9.3.3", "cpe:/a:isc:bind:9.3.1:rc1", "cpe:/a:isc:bind:9.2.4:rc4", "cpe:/a:isc:bind:9.10.0:a2", "cpe:/a:isc:bind:9.6.0:a1", "cpe:/a:isc:bind:9.10.0:a1", "cpe:/a:isc:bind:9.4.0:a6", "cpe:/a:isc:bind:9.4", "cpe:/a:isc:bind:9.1.1:rc7", "cpe:/a:isc:bind:9.2.3", "cpe:/a:isc:bind:9.2.7:rc3", "cpe:/a:isc:bind:9.4.0:b2", "cpe:/a:isc:bind:9.4.3", "cpe:/a:isc:bind:9.3.0:rc1", "cpe:/a:isc:bind:9.6.0:b1", "cpe:/a:isc:bind:9.2.3:rc1", "cpe:/a:isc:bind:9.2.3:rc4", "cpe:/a:isc:bind:9.2.4:rc3", "cpe:/a:isc:bind:9.2.0:rc3", "cpe:/a:isc:bind:9.2.7:rc2", "cpe:/a:isc:bind:9.0.1", "cpe:/a:isc:bind:9.3.5", "cpe:/a:isc:bind:9.2.2:p3", "cpe:/a:isc:bind:9.10.3:rc1", "cpe:/a:isc:bind:9.2.9:rc1", "cpe:/a:isc:bind:9.10.2:b1", "cpe:/a:isc:bind:9.10.2:p1", "cpe:/a:isc:bind:9.4.2:rc1", "cpe:/a:isc:bind:9.4.3:b3", "cpe:/a:isc:bind:9.2.1:rc1", "cpe:/a:isc:bind:9.2.4", "cpe:/a:isc:bind:9.10.3", "cpe:/a:isc:bind:9.1.3:rc1", "cpe:/a:isc:bind:9.4.0:b1", "cpe:/a:isc:bind:9.2.0:rc9", "cpe:/a:isc:bind:9.2.2:p2", "cpe:/a:isc:bind:9.2.2", "cpe:/a:isc:bind:9.10.0:b2", "cpe:/a:isc:bind:9.0.0:rc4", "cpe:/a:isc:bind:9.0.1:rc2", "cpe:/a:isc:bind:9.2.1"], "assessment": {"href": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11753", "name": "oval:org.mitre.oval:def:11753", "system": "http://oval.mitre.org/XMLSchema/oval-definitions-5"}, "scanner": [{"href": "http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:6665", "name": "oval:org.mitre.oval:def:6665", "system": "http://oval.mitre.org/XMLSchema/oval-definitions-5"}]}

{"result": {"f5": [{"id": "SOL15787", "type": "f5", "title": "SOL15787 - BIND vulnerability CVE-2010-0382", "description": "Recommended Action\n\nIf the previous table lists a version in the **Versions known to be not vulnerable** column, you can eliminate this vulnerability by upgrading to the listed version. \n\n\nSupplemental Information\n\n * SOL9970: Subscribing to email notifications regarding F5 products\n * SOL9957: Creating a custom RSS feed to view new and updated documents\n * SOL4602: Overview of the F5 security vulnerability response policy\n * SOL4918: Overview of the F5 critical issue hotfix policy\n * SOL167: Downloading software and firmware from F5\n * SOL9502: BIG-IP hotfix matrix\n", "published": "2014-11-03T00:00:00", "cvss": {"score": 7.6, "vector": "AV:NETWORK/AC:HIGH/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "http://support.f5.com/kb/en-us/solutions/public/15000/700/sol15787.html", "cvelist": ["CVE-2010-0382"], "lastseen": "2016-09-26T17:23:07"}], "nessus": [{"id": "F5_BIGIP_SOL15787.NASL", "type": "nessus", "title": "F5 Networks BIG-IP : BIND vulnerability (SOL15787)", "description": "ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta handles out-of-bailiwick data accompanying a secure response without re-fetching from the original source, which allows remote attackers to have an unspecified impact via a crafted response, aka Bug 20819. NOTE: this vulnerability exists because of a regression during the fix for CVE-2009-4022.", "published": "2014-11-04T00:00:00", "cvss": {"score": 7.6, "vector": "AV:NETWORK/AC:HIGH/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "https://www.tenable.com/plugins/index.php?view=single&id=78835", "cvelist": ["CVE-2010-0382", "CVE-2009-4022"], "lastseen": "2017-10-29T13:42:42"}, {"id": "BIND9_DNSSEC_CACHE_POISONING.NASL", "type": "nessus", "title": "ISC BIND 9 DNSSEC Cache Poisoning", "description": "According to its version number, the remote installation of BIND suffers from a cache poisoning vulnerability. This issue affects all versions prior to 9.4.3-P5, 9.5.2-P2 or 9.6.1-P3.\n\nNote that only nameservers that allow recursive queries and validate DNSSEC records are affected. Nessus has not attempted to verify if this configuration applies to the remote service, though, so this could be a false positive.", "published": "2009-12-02T00:00:00", "cvss": {"score": 7.6, "vector": "AV:NETWORK/AC:HIGH/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "https://www.tenable.com/plugins/index.php?view=single&id=42983", "cvelist": ["CVE-2010-0382", "CVE-2009-4022"], "lastseen": "2017-10-29T13:33:08"}, {"id": "DEBIAN_DSA-2054.NASL", "type": "nessus", "title": "Debian DSA-2054-1 : bind9 - DNS cache poisoning", "description": "Several cache-poisoning vulnerabilities have been discovered in BIND.\nThese vulnerabilities apply only if DNSSEC validation is enabled and trust anchors have been installed, which is not the default.\n\nThe Common Vulnerabilities and Exposures project identifies the following problems :\n\n - CVE-2010-0097 BIND does not properly validate DNSSEC NSEC records, which allows remote attackers to add the Authenticated Data (AD) flag to a forged NXDOMAIN response for an existing domain.\n\n - CVE-2010-0290 When processing crafted responses containing CNAME or DNAME records, BIND is subject to a DNS cache poisoning vulnerability, provided that DNSSEC validation is enabled and trust anchors have been installed.\n\n - CVE-2010-0382 When processing certain responses containing out-of-bailiwick data, BIND is subject to a DNS cache poisoning vulnerability, provided that DNSSEC validation is enabled and trust anchors have been installed.\n\nIn addition, this update introduce a more conservative query behavior in the presence of repeated DNSSEC validation failures, addressing the 'roll over and die' phenomenon. The new version also supports the cryptographic algorithm used by the upcoming signed ICANN DNS root (RSASHA256 from RFC 5702), and the NSEC3 secure denial of existence algorithm used by some signed top-level domains.\n\nThis update is based on a new upstream version of BIND 9, 9.6-ESV-R1.\nBecause of the scope of changes, extra care is recommended when installing the update. Due to ABI changes, new Debian packages are included, and the update has to be installed using 'apt-get dist-upgrade' (or an equivalent aptitude command).", "published": "2010-06-08T00:00:00", "cvss": {"score": 7.6, "vector": "AV:NETWORK/AC:HIGH/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "https://www.tenable.com/plugins/index.php?view=single&id=46829", "cvelist": ["CVE-2010-0382", "CVE-2010-0290", "CVE-2010-0097"], "lastseen": "2017-10-29T13:39:03"}, {"id": "REDHAT-RHSA-2010-0062.NASL", "type": "nessus", "title": "RHEL 5 : bind (RHSA-2010:0062)", "description": "Updated bind packages that fix two security issues are now available for Red Hat Enterprise Linux 5.\n\nThis update has been rated as having moderate security impact by the Red Hat Security Response Team.\n\nThe Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.\n\nA flaw was found in the BIND DNSSEC NSEC/NSEC3 validation code. If BIND was running as a DNSSEC-validating resolver, it could incorrectly cache NXDOMAIN responses, as if they were valid, for records proven by NSEC or NSEC3 to exist. A remote attacker could use this flaw to cause a BIND server to return the bogus, cached NXDOMAIN responses for valid records and prevent users from retrieving those records (denial of service). (CVE-2010-0097)\n\nThe original fix for CVE-2009-4022 was found to be incomplete. BIND was incorrectly caching certain responses without performing proper DNSSEC validation. CNAME and DNAME records could be cached, without proper DNSSEC validation, when received from processing recursive client queries that requested DNSSEC records but indicated that checking should be disabled. A remote attacker could use this flaw to bypass the DNSSEC validation check and perform a cache poisoning attack if the target BIND server was receiving such client queries.\n(CVE-2010-0290)\n\nAll BIND users are advised to upgrade to these updated packages, which contain a backported patch to resolve these issues. After installing the update, the BIND daemon (named) will be restarted automatically.", "published": "2010-01-21T00:00:00", "cvss": {"score": 7.6, "vector": "AV:NETWORK/AC:HIGH/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "https://www.tenable.com/plugins/index.php?view=single&id=44105", "cvelist": ["CVE-2010-0382", "CVE-2010-0290", "CVE-2010-0097"], "lastseen": "2017-10-29T13:36:42"}, {"id": "ORACLELINUX_ELSA-2010-0062.NASL", "type": "nessus", "title": "Oracle Linux 5 : bind (ELSA-2010-0062)", "description": "From Red Hat Security Advisory 2010:0062 :\n\nUpdated bind packages that fix two security issues are now available for Red Hat Enterprise Linux 5.\n\nThis update has been rated as having moderate security impact by the Red Hat Security Response Team.\n\nThe Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.\n\nA flaw was found in the BIND DNSSEC NSEC/NSEC3 validation code. If BIND was running as a DNSSEC-validating resolver, it could incorrectly cache NXDOMAIN responses, as if they were valid, for records proven by NSEC or NSEC3 to exist. A remote attacker could use this flaw to cause a BIND server to return the bogus, cached NXDOMAIN responses for valid records and prevent users from retrieving those records (denial of service). (CVE-2010-0097)\n\nThe original fix for CVE-2009-4022 was found to be incomplete. BIND was incorrectly caching certain responses without performing proper DNSSEC validation. CNAME and DNAME records could be cached, without proper DNSSEC validation, when received from processing recursive client queries that requested DNSSEC records but indicated that checking should be disabled. A remote attacker could use this flaw to bypass the DNSSEC validation check and perform a cache poisoning attack if the target BIND server was receiving such client queries.\n(CVE-2010-0290)\n\nAll BIND users are advised to upgrade to these updated packages, which contain a backported patch to resolve these issues. After installing the update, the BIND daemon (named) will be restarted automatically.", "published": "2013-07-12T00:00:00", "cvss": {"score": 7.6, "vector": "AV:NETWORK/AC:HIGH/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "https://www.tenable.com/plugins/index.php?view=single&id=67991", "cvelist": ["CVE-2010-0382", "CVE-2010-0290", "CVE-2010-0097"], "lastseen": "2017-10-29T13:37:02"}, {"id": "CENTOS_RHSA-2010-0062.NASL", "type": "nessus", "title": "CentOS 5 : bind (CESA-2010:0062)", "description": "Updated bind packages that fix two security issues are now available for Red Hat Enterprise Linux 5.\n\nThis update has been rated as having moderate security impact by the Red Hat Security Response Team.\n\nThe Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.\n\nA flaw was found in the BIND DNSSEC NSEC/NSEC3 validation code. If BIND was running as a DNSSEC-validating resolver, it could incorrectly cache NXDOMAIN responses, as if they were valid, for records proven by NSEC or NSEC3 to exist. A remote attacker could use this flaw to cause a BIND server to return the bogus, cached NXDOMAIN responses for valid records and prevent users from retrieving those records (denial of service). (CVE-2010-0097)\n\nThe original fix for CVE-2009-4022 was found to be incomplete. BIND was incorrectly caching certain responses without performing proper DNSSEC validation. CNAME and DNAME records could be cached, without proper DNSSEC validation, when received from processing recursive client queries that requested DNSSEC records but indicated that checking should be disabled. A remote attacker could use this flaw to bypass the DNSSEC validation check and perform a cache poisoning attack if the target BIND server was receiving such client queries.\n(CVE-2010-0290)\n\nAll BIND users are advised to upgrade to these updated packages, which contain a backported patch to resolve these issues. After installing the update, the BIND daemon (named) will be restarted automatically.", "published": "2010-01-21T00:00:00", "cvss": {"score": 7.6, "vector": "AV:NETWORK/AC:HIGH/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "https://www.tenable.com/plugins/index.php?view=single&id=44099", "cvelist": ["CVE-2010-0382", "CVE-2010-0290", "CVE-2010-0097"], "lastseen": "2017-10-29T13:39:51"}, {"id": "GENTOO_GLSA-201006-11.NASL", "type": "nessus", "title": "GLSA-201006-11 : BIND: Multiple vulnerabilities", "description": "The remote host is affected by the vulnerability described in GLSA-201006-11 (BIND: Multiple vulnerabilities)\n\n Multiple cache poisoning vulnerabilities were discovered in BIND. For further information please consult the CVE entries and the ISC Security Bulletin referenced below.\n Note: CVE-2010-0290 and CVE-2010-0382 exist because of an incomplete fix and a regression for CVE-2009-4022.\n Impact :\n\n An attacker could exploit this weakness to poison the cache of a recursive resolver and thus spoof DNS traffic, which could e.g. lead to the redirection of web or mail traffic to malicious sites.\n Workaround :\n\n There is no known workaround at this time.", "published": "2010-06-02T00:00:00", "cvss": {"score": 7.6, "vector": "AV:NETWORK/AC:HIGH/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "https://www.tenable.com/plugins/index.php?view=single&id=46778", "cvelist": ["CVE-2010-0382", "CVE-2010-0290", "CVE-2010-0097", "CVE-2009-4022"], "lastseen": "2017-10-29T13:43:36"}, {"id": "AIX_IV11743.NASL", "type": "nessus", "title": "AIX 6.1 TL 6 : bind9 (IV11743)", "description": "An as-yet unidentified network event caused BIND 9 resolvers to cache an invalid record, subsequent queries for which could crash the resolvers with an assertion failure.\n\nFurthermore, AIX BIND 9.4.1 is affected by the following three security vulnerabilities: CVE-2010-0382 - ISC BIND Out-Of-Bailwick Data Handling Error CVE-2010-0097 - ISC BIND Improper DNSSEC NSEC and NSEC3 Record CVE-2009-0025 - BIND OpenSSL DSA_do_verify and EVP_VerifyFinal.", "published": "2013-01-24T00:00:00", "cvss": {"score": 7.6, "vector": "AV:NETWORK/AC:HIGH/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "https://www.tenable.com/plugins/index.php?view=single&id=63706", "cvelist": ["CVE-2010-0382", "CVE-2010-0097", "CVE-2009-0025", "CVE-2011-4313"], "lastseen": "2017-10-29T13:33:33"}, {"id": "AIX_IV09978.NASL", "type": "nessus", "title": "AIX 6.1 TL 7 : bind9 (IV09978)", "description": "An as-yet unidentified network event caused BIND 9 resolvers to cache an invalid record, subsequent queries for which could crash the resolvers with an assertion failure.\n\nFurthermore, AIX BIND 9.4.1 is affected by the following three security vulnerabilities: CVE-2010-0382 - ISC BIND Out-Of-Bailwick Data Handling Error CVE-2010-0097 - ISC BIND Improper DNSSEC NSEC and NSEC3 Record CVE-2009-0025 - BIND OpenSSL DSA_do_verify and EVP_VerifyFinal.", "published": "2013-01-24T00:00:00", "cvss": {"score": 7.6, "vector": "AV:NETWORK/AC:HIGH/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "https://www.tenable.com/plugins/index.php?view=single&id=63700", "cvelist": ["CVE-2010-0382", "CVE-2010-0097", "CVE-2009-0025", "CVE-2011-4313"], "lastseen": "2017-10-29T13:41:49"}, {"id": "AIX_IV11742.NASL", "type": "nessus", "title": "AIX 6.1 TL 5 : bind9 (IV11742)", "description": "An as-yet unidentified network event caused BIND 9 resolvers to cache an invalid record, subsequent queries for which could crash the resolvers with an assertion failure.\n\nFurthermore, AIX BIND 9.4.1 is affected by the following three security vulnerabilities: CVE-2010-0382 - ISC BIND Out-Of-Bailwick Data Handling Error CVE-2010-0097 - ISC BIND Improper DNSSEC NSEC and NSEC3 Record CVE-2009-0025 - BIND OpenSSL DSA_do_verify and EVP_VerifyFinal.", "published": "2013-01-24T00:00:00", "cvss": {"score": 7.6, "vector": "AV:NETWORK/AC:HIGH/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "https://www.tenable.com/plugins/index.php?view=single&id=63705", "cvelist": ["CVE-2010-0382", "CVE-2010-0097", "CVE-2009-0025", "CVE-2011-4313"], "lastseen": "2017-10-29T13:43:27"}], "openvas": [{"id": "OPENVAS:136141256231067632", "type": "openvas", "title": "Debian Security Advisory DSA 2054-2 (bind9)", "description": "The remote host is missing an update to bind9\nannounced via advisory DSA 2054-2.", "published": "2010-07-06T00:00:00", "cvss": {"score": 7.6, "vector": "AV:NETWORK/AC:HIGH/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "http://plugins.openvas.org/nasl.php?oid=136141256231067632", "cvelist": ["CVE-2010-0382", "CVE-2010-0290", "CVE-2010-0097"], "lastseen": "2018-01-06T13:05:00"}, {"id": "OPENVAS:835240", "type": "openvas", "title": "HP-UX Update for BIND HPSBUX02546", "description": "Check for the Version of BIND", "published": "2010-10-01T00:00:00", "cvss": {"score": 7.6, "vector": "AV:NETWORK/AC:HIGH/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "http://plugins.openvas.org/nasl.php?oid=835240", "cvelist": ["CVE-2010-0382", "CVE-2010-0290", "CVE-2009-4022"], "lastseen": "2017-12-14T11:48:51"}, {"id": "OPENVAS:1361412562310835240", "type": "openvas", "title": "HP-UX Update for BIND HPSBUX02546", "description": "Check for the Version of BIND", "published": "2010-10-01T00:00:00", "cvss": {"score": 7.6, "vector": "AV:NETWORK/AC:HIGH/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310835240", "cvelist": ["CVE-2010-0382", "CVE-2010-0290", "CVE-2009-4022"], "lastseen": "2018-01-02T10:54:40"}, {"id": "OPENVAS:136141256231067539", "type": "openvas", "title": "Debian Security Advisory DSA 2054-1 (bind9)", "description": "The remote host is missing an update to bind9\nannounced via advisory DSA 2054-1.", "published": "2010-06-10T00:00:00", "cvss": {"score": 7.6, "vector": "AV:NETWORK/AC:HIGH/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "http://plugins.openvas.org/nasl.php?oid=136141256231067539", "cvelist": ["CVE-2010-0382", "CVE-2010-0290", "CVE-2010-0097"], "lastseen": "2018-01-11T11:04:40"}, {"id": "OPENVAS:67632", "type": "openvas", "title": "Debian Security Advisory DSA 2054-2 (bind9)", "description": "The remote host is missing an update to bind9\nannounced via advisory DSA 2054-2.", "published": "2010-07-06T00:00:00", "cvss": {"score": 7.6, "vector": "AV:NETWORK/AC:HIGH/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "http://plugins.openvas.org/nasl.php?oid=67632", "cvelist": ["CVE-2010-0382", "CVE-2010-0290", "CVE-2010-0097"], "lastseen": "2017-07-24T12:49:15"}, {"id": "OPENVAS:1361412562310100458", "type": "openvas", "title": "ISC BIND 9 DNSSEC Bogus NXDOMAIN Response Remote Cache Poisoning Vulnerability", "description": "ISC BIND 9 is prone to a remote cache-poisoning vulnerability.", "published": "2010-01-20T00:00:00", "cvss": {"score": 7.6, "vector": "AV:NETWORK/AC:HIGH/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310100458", "cvelist": ["CVE-2010-0382", "CVE-2010-0290", "CVE-2010-0097"], "lastseen": "2017-07-02T21:09:53"}, {"id": "OPENVAS:67539", "type": "openvas", "title": "Debian Security Advisory DSA 2054-1 (bind9)", "description": "The remote host is missing an update to bind9\nannounced via advisory DSA 2054-1.", "published": "2010-06-10T00:00:00", "cvss": {"score": 7.6, "vector": "AV:NETWORK/AC:HIGH/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "http://plugins.openvas.org/nasl.php?oid=67539", "cvelist": ["CVE-2010-0382", "CVE-2010-0290", "CVE-2010-0097"], "lastseen": "2017-07-24T12:49:24"}, {"id": "OPENVAS:136141256231069014", "type": "openvas", "title": "Gentoo Security Advisory GLSA 201006-11 (BIND)", "description": "The remote host is missing updates announced in\nadvisory GLSA 201006-11.", "published": "2011-03-09T00:00:00", "cvss": {"score": 7.6, "vector": "AV:NETWORK/AC:HIGH/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "http://plugins.openvas.org/nasl.php?oid=136141256231069014", "cvelist": ["CVE-2010-0382", "CVE-2010-0290", "CVE-2010-0097", "CVE-2009-4022"], "lastseen": "2018-04-06T11:36:00"}, {"id": "OPENVAS:1361412562310122397", "type": "openvas", "title": "Oracle Linux Local Check: ELSA-2010-0062", "description": "Oracle Linux Local Security Checks ELSA-2010-0062", "published": "2015-10-06T00:00:00", "cvss": {"score": 7.6, "vector": "AV:NETWORK/AC:HIGH/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310122397", "cvelist": ["CVE-2010-0382", "CVE-2010-0290", "CVE-2010-0097", "CVE-2009-4022"], "lastseen": "2017-07-24T12:53:57"}, {"id": "OPENVAS:69014", "type": "openvas", "title": "Gentoo Security Advisory GLSA 201006-11 (BIND)", "description": "The remote host is missing updates announced in\nadvisory GLSA 201006-11.", "published": "2011-03-09T00:00:00", "cvss": {"score": 7.6, "vector": "AV:NETWORK/AC:HIGH/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "http://plugins.openvas.org/nasl.php?oid=69014", "cvelist": ["CVE-2010-0382", "CVE-2010-0290", "CVE-2010-0097", "CVE-2009-4022"], "lastseen": "2017-09-04T14:19:58"}], "debian": [{"id": "DSA-2054", "type": "debian", "title": "bind9 -- DNS cache poisoning", "description": "Several cache-poisoning vulnerabilities have been discovered in BIND. These vulnerabilities apply only if DNSSEC validation is enabled and trust anchors have been installed, which is not the default.\n\nThe Common Vulnerabilities and Exposures project identifies the following problems:\n\n * [CVE-2010-0097](<https://security-tracker.debian.org/tracker/CVE-2010-0097>)\n\nBIND does not properly validate DNSSEC NSEC records, which allows remote attackers to add the Authenticated Data (AD) flag to a forged NXDOMAIN response for an existing domain.\n\n * [CVE-2010-0290](<https://security-tracker.debian.org/tracker/CVE-2010-0290>)\n\nWhen processing crafted responses containing CNAME or DNAME records, BIND is subject to a DNS cache poisoning vulnerability, provided that DNSSEC validation is enabled and trust anchors have been installed.\n\n * [CVE-2010-0382](<https://security-tracker.debian.org/tracker/CVE-2010-0382>)\n\nWhen processing certain responses containing out-of-bailiwick data, BIND is subject to a DNS cache poisoning vulnerability, provided that DNSSEC validation is enabled and trust anchors have been installed.\n\nIn addition, this update introduce a more conservative query behavior in the presence of repeated DNSSEC validation failures, addressing the \"roll over and die\" phenomenon. The new version also supports the cryptographic algorithm used by the upcoming signed ICANN DNS root (RSASHA256 from RFC 5702), and the NSEC3 secure denial of existence algorithm used by some signed top-level domains.\n\nThis update is based on a new upstream version of BIND 9, 9.6-ESV-R1. Because of the scope of changes, extra care is recommended when installing the update. Due to ABI changes, new Debian packages are included, and the update has to be installed using \"apt-get dist-upgrade\" (or an equivalent aptitude command).\n\nFor the stable distribution (lenny), these problems have been fixed in version 1:9.6.ESV.R1+dfsg-0+lenny1.\n\nFor the unstable distribution (sid), these problems have been fixed in version 1:9.7.0.dfsg-1.\n\nWe recommend that you upgrade your bind9 packages.", "published": "2010-06-04T00:00:00", "cvss": {"score": 7.6, "vector": "AV:NETWORK/AC:HIGH/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "http://www.debian.org/security/dsa-2054", "cvelist": ["CVE-2010-0382", "CVE-2010-0290", "CVE-2010-0097"], "lastseen": "2016-09-02T18:28:15"}], "oraclelinux": [{"id": "ELSA-2010-0062", "type": "oraclelinux", "title": "bind security update", "description": "[30:9.3.6-4.P1.2]\n- NSEC validation code could cause wrong NXDOMAIN responses (#554851,\n CVE-2010-0097)\n- improve fix for CVE-2009-4022 (#538744)\n - {C,D}NAMEs could be returned to clients without proper DNSSEC validation\n - don't validate + cache out-of-bailiwick data returned with a secure answer.\n Refetch it instead. ", "published": "2010-01-20T00:00:00", "cvss": {"score": 7.6, "vector": "AV:NETWORK/AC:HIGH/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "http://linux.oracle.com/errata/ELSA-2010-0062.html", "cvelist": ["CVE-2010-0382", "CVE-2010-0290", "CVE-2010-0097", "CVE-2009-4022"], "lastseen": "2016-09-04T11:16:16"}], "gentoo": [{"id": "GLSA-201006-11", "type": "gentoo", "title": "BIND: Multiple vulnerabilities", "description": "### Background\n\nISC BIND is the Internet Systems Consortium implementation of the Domain Name System (DNS) protocol. \n\n### Description\n\nMultiple cache poisoning vulnerabilities were discovered in BIND. For further information please consult the CVE entries and the ISC Security Bulletin referenced below. \n\nNote: CVE-2010-0290 and CVE-2010-0382 exist because of an incomplete fix and a regression for CVE-2009-4022. \n\n### Impact\n\nAn attacker could exploit this weakness to poison the cache of a recursive resolver and thus spoof DNS traffic, which could e.g. lead to the redirection of web or mail traffic to malicious sites. \n\n### Workaround\n\nThere is no known workaround at this time. \n\n### Resolution\n\nAll BIND users should upgrade to the latest version: \n \n \n # emerge --sync\n # emerge --ask --oneshot --verbose \">=net-dns/bind-9.4.3_p5\"", "published": "2010-06-01T00:00:00", "cvss": {"score": 7.6, "vector": "AV:NETWORK/AC:HIGH/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "https://security.gentoo.org/glsa/201006-11", "cvelist": ["CVE-2010-0382", "CVE-2010-0290", "CVE-2010-0097", "CVE-2009-4022"], "lastseen": "2016-09-06T19:46:00"}], "centos": [{"id": "CESA-2010:0062", "type": "centos", "title": "bind, caching security update", "description": "**CentOS Errata and Security Advisory** CESA-2010:0062\n\n\nThe Berkeley Internet Name Domain (BIND) is an implementation of the Domain\nName System (DNS) protocols. BIND includes a DNS server (named); a resolver\nlibrary (routines for applications to use when interfacing with DNS); and\ntools for verifying that the DNS server is operating correctly.\n\nA flaw was found in the BIND DNSSEC NSEC/NSEC3 validation code. If BIND was\nrunning as a DNSSEC-validating resolver, it could incorrectly cache\nNXDOMAIN responses, as if they were valid, for records proven by NSEC or\nNSEC3 to exist. A remote attacker could use this flaw to cause a BIND\nserver to return the bogus, cached NXDOMAIN responses for valid records and\nprevent users from retrieving those records (denial of service).\n(CVE-2010-0097)\n\nThe original fix for CVE-2009-4022 was found to be incomplete. BIND was\nincorrectly caching certain responses without performing proper DNSSEC\nvalidation. CNAME and DNAME records could be cached, without proper DNSSEC\nvalidation, when received from processing recursive client queries that\nrequested DNSSEC records but indicated that checking should be disabled. A\nremote attacker could use this flaw to bypass the DNSSEC validation check\nand perform a cache poisoning attack if the target BIND server was\nreceiving such client queries. (CVE-2010-0290)\n\nAll BIND users are advised to upgrade to these updated packages, which\ncontain a backported patch to resolve these issues. After installing the\nupdate, the BIND daemon (named) will be restarted automatically.\n\n**Merged security bulletin from advisories:**\nhttp://lists.centos.org/pipermail/centos-announce/2010-January/016477.html\nhttp://lists.centos.org/pipermail/centos-announce/2010-January/016478.html\n\n**Affected packages:**\nbind\nbind-chroot\nbind-devel\nbind-libbind-devel\nbind-libs\nbind-sdb\nbind-utils\ncaching-nameserver\n\n**Upstream details at:**\n", "published": "2010-01-20T17:59:57", "cvss": {"score": 7.6, "vector": "AV:NETWORK/AC:HIGH/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "http://lists.centos.org/pipermail/centos-announce/2010-January/016477.html", "cvelist": ["CVE-2010-0382", "CVE-2010-0290", "CVE-2010-0097", "CVE-2009-4022"], "lastseen": "2017-10-03T18:25:48"}], "redhat": [{"id": "RHSA-2010:0062", "type": "redhat", "title": "(RHSA-2010:0062) Moderate: bind security update", "description": "The Berkeley Internet Name Domain (BIND) is an implementation of the Domain\nName System (DNS) protocols. BIND includes a DNS server (named); a resolver\nlibrary (routines for applications to use when interfacing with DNS); and\ntools for verifying that the DNS server is operating correctly.\n\nA flaw was found in the BIND DNSSEC NSEC/NSEC3 validation code. If BIND was\nrunning as a DNSSEC-validating resolver, it could incorrectly cache\nNXDOMAIN responses, as if they were valid, for records proven by NSEC or\nNSEC3 to exist. A remote attacker could use this flaw to cause a BIND\nserver to return the bogus, cached NXDOMAIN responses for valid records and\nprevent users from retrieving those records (denial of service).\n(CVE-2010-0097)\n\nThe original fix for CVE-2009-4022 was found to be incomplete. BIND was\nincorrectly caching certain responses without performing proper DNSSEC\nvalidation. CNAME and DNAME records could be cached, without proper DNSSEC\nvalidation, when received from processing recursive client queries that\nrequested DNSSEC records but indicated that checking should be disabled. A\nremote attacker could use this flaw to bypass the DNSSEC validation check\nand perform a cache poisoning attack if the target BIND server was\nreceiving such client queries. (CVE-2010-0290)\n\nAll BIND users are advised to upgrade to these updated packages, which\ncontain a backported patch to resolve these issues. After installing the\nupdate, the BIND daemon (named) will be restarted automatically.", "published": "2010-01-20T05:00:00", "cvss": {"score": 7.6, "vector": "AV:NETWORK/AC:HIGH/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "https://access.redhat.com/errata/RHSA-2010:0062", "cvelist": ["CVE-2009-4022", "CVE-2010-0097", "CVE-2010-0290", "CVE-2010-0382"], "lastseen": "2017-09-09T07:20:19"}], "vmware": [{"id": "VMSA-2010-0009", "type": "vmware", "title": "ESXi utilities and ESX Service Console third party updates", "description": "a. Service Console update for COS kernel \n \nUpdated COS package \"kernel\" addresses the security issues that are fixed through versions 2.6.18-164.11.1. \nThe Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the names CVE-2009-2695, CVE-2009-2908, CVE-2009-3228, CVE-2009-3286, CVE-2009-3547, CVE-2009-3613 to the security issues fixed in kernel 2.6.18-164.6.1 \nThe Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the names CVE-2009-3612, CVE-2009-3620, CVE-2009-3621, CVE-2009-3726 to the security issues fixed in kernel 2.6.18-164.9.1. \nThe Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the names CVE-2007-4567, CVE-2009-4536, CVE-2009-4537, CVE-2009-4538 to the security issues fixed in kernel 2.6.18-164.10.1 \nThe Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the names CVE-2006-6304, CVE-2009-2910, CVE-2009-3080, CVE-2009-3556, CVE-2009-3889, CVE-2009-3939, CVE-2009-4020, CVE-2009-4021, CVE-2009-4138, CVE-2009-4141, and CVE-2009-4272 to the security issues fixed in kernel 2.6.18-164.11.1. \nColumn 4 of the following table lists the action required to remediate the vulnerability in each release, if a solution is available. \n\n", "published": "2010-05-27T00:00:00", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "https://www.vmware.com/security/advisories/VMSA-2010-0009.html", "cvelist": ["CVE-2009-3613", "CVE-2009-3556", "CVE-2009-1386", "CVE-2009-4537", "CVE-2009-1379", "CVE-2009-3939", "CVE-2009-1377", "CVE-2009-4272", "CVE-2009-3621", "CVE-2009-3726", "CVE-2009-2910", "CVE-2009-4355", "CVE-2009-4141", "CVE-2009-2409", "CVE-2009-3563", "CVE-2009-1387", "CVE-2010-0001", "CVE-2007-4567", "CVE-2010-0382", "CVE-2009-1378", "CVE-2010-0290", "CVE-2009-0590", "CVE-2009-3080", "CVE-2009-4538", "CVE-2009-3547", "CVE-2006-6304", "CVE-2009-4020", "CVE-2009-3620", "CVE-2010-0426", "CVE-2009-4536", "CVE-2010-0427", "CVE-2009-2908", "CVE-2009-1384", "CVE-2009-3228", "CVE-2009-3889", "CVE-2010-0097", "CVE-2009-4212", "CVE-2009-4021", "CVE-2009-3286", "CVE-2009-3612", "CVE-2009-3736", "CVE-2009-4138", "CVE-2009-2695"], "lastseen": "2016-09-04T11:19:30"}]}}