The named(8) daemon in BIND 9.3.0 in FreeBSD-SA-05:12.bind.asc has an inappropriate internal consistency test, triggering named(8) to exit
Reporter | Title | Published | Views | Family All 20 |
---|---|---|---|---|
![]() | CVE-2005-0034 | 2 May 200504:00 | – | cve |
![]() | BIND 9.3.0 denial of service vulnerability CAN-2005-0034 | 22 Feb 200504:00 | – | f5 |
![]() | SOL4351 - BIND 9.3.0 denial of service vulnerability CAN-2005-0034 | 21 Feb 200500:00 | – | f5 |
![]() | Mandrake Linux Security Advisory : bind (MDKSA-2005:023) | 27 Jan 200500:00 | – | nessus |
![]() | F5 Networks BIG-IP : BIND 9.3.0 denial of service vulnerability (SOL4351) | 10 Oct 201400:00 | – | nessus |
![]() | ISC BIND < 9.3.1 Validator Self Checking Remote DoS | 26 Jan 200500:00 | – | nessus |
![]() | FreeBSD : bind9 -- denial of service (30e4ed7b-1ca6-11da-bc01-000e0c2e438a) | 13 May 200600:00 | – | nessus |
![]() | FreeBSD Ports: bind9 | 4 Sep 200800:00 | – | openvas |
![]() | FreeBSD Security Advisory (FreeBSD-SA-05:12.bind9.asc) | 4 Sep 200800:00 | – | openvas |
![]() | FreeBSD Security Advisory (FreeBSD-SA-05:12.bind9.asc) | 4 Sep 200800:00 | – | openvas |
#
#ADV FreeBSD-SA-05:12.bind.asc
# OpenVAS Vulnerability Test
# $
# Description: Auto generated from vuxml or freebsd advisories
#
# Authors:
# Thomas Reinke <[email protected]>
#
# Copyright:
# Copyright (c) 2008 E-Soft Inc. http://www.securityspace.com
# Text descriptions are largely excerpted from the referenced
# advisories, and are Copyright (c) the respective author(s)
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License version 2,
# as published by the Free Software Foundation
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
#
#
tag_insight = "BIND 9 is an implementation of the Domain Name System (DNS) protocols.
The named(8) daemon is the Internet domain name server. DNS Security
Extensions (DNSSEC) are additional protocol options that add
authentication and integrity to the DNS protocols.
DNSSEC is not enabled by default in any FreeBSD release. A system
administrator must take special action to enable DNSSEC.
A DNSSEC-related validator function in BIND 9.3.0 contains an
inappropriate internal consistency test. When this test is triggered,
named(8) will exit.";
tag_solution = "Upgrade your system to the appropriate stable release
or security branch dated after the correction date
https://secure1.securityspace.com/smysecure/catid.html?in=FreeBSD-SA-05:12.bind.asc";
tag_summary = "The remote host is missing an update to the system
as announced in the referenced advisory FreeBSD-SA-05:12.bind.asc";
if(description)
{
script_id(53973);
script_version("$Revision: 8023 $");
script_tag(name:"last_modification", value:"$Date: 2017-12-07 09:36:26 +0100 (Thu, 07 Dec 2017) $");
script_tag(name:"creation_date", value:"2008-09-04 20:41:11 +0200 (Thu, 04 Sep 2008)");
script_bugtraq_id(12365);
script_cve_id("CVE-2005-0034");
script_tag(name:"cvss_base", value:"4.3");
script_tag(name:"cvss_base_vector", value:"AV:N/AC:M/Au:N/C:N/I:N/A:P");
name = "FreeBSD Security Advisory (FreeBSD-SA-05:12.bind.asc)";
script_name(name);
script_category(ACT_GATHER_INFO);
script_copyright("Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com");
family = "FreeBSD Local Security Checks";
script_family(family);
script_dependencies("gather-package-list.nasl");
script_mandatory_keys("ssh/login/freebsdpatchlevel", "login/SSH/success");
script_tag(name : "insight" , value : tag_insight);
script_tag(name : "solution" , value : tag_solution);
script_tag(name : "summary" , value : tag_summary);
script_tag(name:"qod_type", value:"package");
script_tag(name:"solution_type", value:"VendorFix");
exit(0);
}
#
# The script code starts here
#
include("pkg-lib-bsd.inc");
vuln = 0;
if(patchlevelcmp(rel:"5.3", patchlevel:"16")<0) {
vuln = 1;
}
if(vuln) {
security_message(0);
} else if (__pkg_match) {
exit(99); # Not vulnerable.
}
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo