The remote host is missing an update for the 'bind97' package(s) announced via the referenced advisory. The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. A flaw was discovered in the way BIND handled certain DNS requests. A remote attacker could use this flaw to send a specially-crafted DNS request packet to BIND, causing it to exit unexpectedly due to a failed assertion. Users of bind97 on Red Hat Enterprise Linux 5, and bind on Red Hat Enterprise Linux 6, are advised to upgrade to these updated packages, which resolve this issue. After installing the update, the BIND daemon (named) will be restarted automatically
Reporter | Title | Published | Views | Family All 96 |
---|---|---|---|---|
![]() | bind97 security update | 7 Jul 201122:46 | β | centos |
![]() | ISC BIND 9 named denial of service vulnerability | 5 Jul 201100:00 | β | cert |
![]() | CVE-2011-2464 | 8 Jul 201120:55 | β | debiancve |
![]() | SOL12986 - BIND vulnerability CVE-2011-2464 | 27 Jul 201100:00 | β | f5 |
![]() | K12986 : BIND vulnerability CVE-2011-2464 | 10 Sep 201300:00 | β | f5 |
![]() | Slackware 13.37 / current : bind (SSA:2011-189-01) | 28 Jul 201100:00 | β | nessus |
![]() | Ubuntu 8.04 LTS / 10.04 LTS / 10.10 / 11.04 : bind9 vulnerability (USN-1163-1) | 6 Jul 201100:00 | β | nessus |
![]() | CentOS 5 : bind97 (CESA-2011:0926) | 8 Jul 201100:00 | β | nessus |
![]() | F5 Networks BIG-IP : BIND vulnerability (SOL12986) | 10 Oct 201400:00 | β | nessus |
![]() | Fedora 14 : bind-9.7.4-0.3.b1.fc14 (2011-9127) | 25 Jul 201100:00 | β | nessus |
# SPDX-FileCopyrightText: 2012 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only
if(description)
{
script_xref(name:"URL", value:"http://lists.centos.org/pipermail/centos-announce/2011-July/017644.html");
script_oid("1.3.6.1.4.1.25623.1.0.881240");
script_version("2023-07-10T08:07:43+0000");
script_tag(name:"last_modification", value:"2023-07-10 08:07:43 +0000 (Mon, 10 Jul 2023)");
script_tag(name:"creation_date", value:"2012-07-30 17:08:03 +0530 (Mon, 30 Jul 2012)");
script_cve_id("CVE-2011-2464");
script_tag(name:"cvss_base", value:"5.0");
script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:N/C:N/I:N/A:P");
script_xref(name:"CESA", value:"2011:0926");
script_name("CentOS Update for bind97 CESA-2011:0926 centos5 x86_64");
script_tag(name:"summary", value:"The remote host is missing an update for the 'bind97'
package(s) announced via the referenced advisory.");
script_category(ACT_GATHER_INFO);
script_copyright("Copyright (C) 2012 Greenbone AG");
script_family("CentOS Local Security Checks");
script_dependencies("gather-package-list.nasl");
script_mandatory_keys("ssh/login/centos", "ssh/login/rpms", re:"ssh/login/release=CentOS5");
script_tag(name:"affected", value:"bind97 on CentOS 5");
script_tag(name:"solution", value:"Please install the updated packages.");
script_tag(name:"insight", value:"The Berkeley Internet Name Domain (BIND) is an implementation of the Domain
Name System (DNS) protocols. BIND includes a DNS server (named), a resolver
library (routines for applications to use when interfacing with DNS), and
tools for verifying that the DNS server is operating correctly.
A flaw was discovered in the way BIND handled certain DNS requests. A
remote attacker could use this flaw to send a specially-crafted DNS request
packet to BIND, causing it to exit unexpectedly due to a failed assertion.
(CVE-2011-2464)
Users of bind97 on Red Hat Enterprise Linux 5, and bind on Red Hat
Enterprise Linux 6, are advised to upgrade to these updated packages, which
resolve this issue. After installing the update, the BIND daemon (named)
will be restarted automatically.");
script_tag(name:"qod_type", value:"package");
script_tag(name:"solution_type", value:"VendorFix");
exit(0);
}
include("revisions-lib.inc");
include("pkg-lib-rpm.inc");
release = rpm_get_ssh_release();
if(!release)
exit(0);
res = "";
if(release == "CentOS5")
{
if ((res = isrpmvuln(pkg:"bind97", rpm:"bind97~9.7.0~6.P2.el5_6.3", rls:"CentOS5")) != NULL)
{
security_message(data:res);
exit(0);
}
if ((res = isrpmvuln(pkg:"bind97-chroot", rpm:"bind97-chroot~9.7.0~6.P2.el5_6.3", rls:"CentOS5")) != NULL)
{
security_message(data:res);
exit(0);
}
if ((res = isrpmvuln(pkg:"bind97-devel", rpm:"bind97-devel~9.7.0~6.P2.el5_6.3", rls:"CentOS5")) != NULL)
{
security_message(data:res);
exit(0);
}
if ((res = isrpmvuln(pkg:"bind97-libs", rpm:"bind97-libs~9.7.0~6.P2.el5_6.3", rls:"CentOS5")) != NULL)
{
security_message(data:res);
exit(0);
}
if ((res = isrpmvuln(pkg:"bind97-utils", rpm:"bind97-utils~9.7.0~6.P2.el5_6.3", rls:"CentOS5")) != NULL)
{
security_message(data:res);
exit(0);
}
if (__pkg_match) exit(99);
exit(0);
}
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. ContactΒ us for a demo andΒ discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo