Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2010-0290
HistoryJan 22, 2010 - 10:00 p.m.

Design/Logic Flaw

2010-01-2222:00:00
PRIOn knowledge base
www.prio-n.com
9

6.8 Medium

AI Score

Confidence

Low

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:N/I:P/A:P

0.009 Low

EPSS

Percentile

82.3%

JSON

Unspecified vulnerability in ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta, with DNSSEC validation enabled and checking disabled (CD), allows remote attackers to conduct DNS cache poisoning attacks by receiving a recursive client query and sending a response that contains (1) CNAME or (2) DNAME records, which do not have the intended validation before caching, aka Bug 20737. NOTE: this vulnerability exists because of an incomplete fix for CVE-2009-4022.

References

Related

nessus 40
f5 5
ubuntucve 3
debiancve 3
cve 3
veracode 2
openvas 56
securityvulns 6
ubuntu 2
redhat 2
centos 2
oraclelinux 2
gentoo 1
prion 2
cert 1
checkpoint_security 1
seebug 1
osv 2
fedora 4
debian 3
suse 2
freebsd_advisory 1
slackware 2
altlinux 4
vmware 4
nessus
nessus
F5 Networks BIG-IP : BIND vulnerability (SOL15748)
2014-10-28 00:00:00
openSUSE Security Update : bind (bind-1843)
2010-01-26 00:00:00
openSUSE Security Update : bind (bind-1845)
2010-01-26 00:00:00
f5
f5
K15748 : BIND vulnerability CVE-2010-0290
2014-10-27 00:00:00
SOL15748 - BIND vulnerability CVE-2010-0290
2014-10-27 00:00:00
K10898 : DNSSEC BIND vulnerability - CVE-2009-4022
2013-07-03 00:00:00
ubuntucve
ubuntucve
CVE-2010-0290
2010-01-19 00:00:00
CVE-2009-4022
2009-11-25 00:00:00
CVE-2010-0382
2010-01-22 00:00:00
debiancve
debiancve
CVE-2010-0290
2010-01-22 22:00:00
CVE-2009-4022
2009-11-25 16:30:00
CVE-2010-0382
2010-01-22 22:00:00
cve
cve
CVE-2010-0290
2010-01-22 22:00:00
CVE-2009-4022
2009-11-25 16:30:00
CVE-2010-0382
2010-01-22 22:00:00
veracode
veracode
Cache Poisoning Attack
2020-04-10 00:41:38
Cache Poisoning Attack
2020-04-10 00:41:27
openvas
openvas
Mandriva Update for bind MDVSA-2010:021 (bind)
2010-01-22 00:00:00
HP-UX Update for BIND HPSBUX02546
2010-10-01 00:00:00
Mandriva Update for bind MDVSA-2010:021 (bind)
2010-01-22 00:00:00
securityvulns
securityvulns
bind DNS server cache poisoning
2010-03-17 00:00:00
[ MDVSA-2010:021 ] bind
2010-01-21 00:00:00
rPSA-2010-0018-1 bind bind-utils caching-nameserver
2010-03-17 00:00:00
ubuntu
ubuntu
Bind vulnerabilities
2010-01-20 00:00:00
Bind vulnerability
2009-12-07 00:00:00
redhat
redhat
(RHSA-2010:0062) Moderate: bind security update
2010-01-20 00:00:00
(RHSA-2009:1620) Moderate: bind security update
2009-11-30 00:00:00
centos
centos
bind, caching security update
2010-01-20 17:59:57
bind, caching security update
2009-12-17 12:39:21
oraclelinux
oraclelinux
bind security update
2010-01-20 00:00:00
bind security update
2009-11-30 00:00:00
gentoo
gentoo
BIND: Multiple vulnerabilities
2010-06-01 00:00:00
prion
prion
Design/Logic Flaw
2009-11-25 16:30:00
Code injection
2010-01-22 22:00:00
cert
cert
BIND DNS Nameserver, DNSSEC validation Vulnerability
2009-12-01 00:00:00
checkpoint_security
checkpoint_security
Check Point response to vulnerability in ISC BIND (CVE-2009-4022) on UTM-1 Edge
2010-01-14 22:00:00
seebug
seebug
ISC BIND 9 DNSSECζŸ₯θ―’ε“εΊ”θΏœη¨‹ηΌ“ε­˜δΈ­ζ―’ζΌζ΄ž
2009-11-27 00:00:00
osv
osv
bind9 - cache poisoning
2009-12-23 00:00:00
bind9 - cache poisoning
2010-06-04 00:00:00
fedora
fedora
[SECURITY] Fedora 12 Update: bind-9.6.1-13.P2.fc12
2009-11-27 21:43:51
[SECURITY] Fedora 12 Update: bind-9.6.1-15.P3.fc12
2010-01-21 00:14:47
[SECURITY] Fedora 11 Update: bind-9.6.1-7.P2.fc11
2009-11-27 21:40:17
debian
debian
[SECURITY] [DSA 1961-1] New bind9 packages fix cache poisoning
2009-12-23 07:07:33
[SECURITY] [DSA 2054-2] New bind9 packages fix cache poisoning
2010-06-15 20:05:57
[SECURITY] [DSA 2054-1] New bind9 packages fix cache poisoning
2010-06-04 19:22:30
suse
suse
DNSSEC cache poisoning in bind
2009-12-02 11:21:35
remote code execution in acroread
2010-01-26 16:40:23
freebsd_advisory
freebsd_advisory
FreeBSD-SA-10:01.bind
2010-01-06 00:00:00
slackware
slackware
bind
2009-12-02 17:30:47
[slackware-security] bind
2010-06-25 18:32:41
altlinux
altlinux
Security fix for the ALT Linux 9 package bind version 9.3.6-alt7
2011-12-16 00:00:00
Security fix for the ALT Linux 6 package bind version 9.3.6-alt7
2011-12-16 00:00:00
Security fix for the ALT Linux 7 package bind version 9.3.6-alt7
2011-12-16 00:00:00
vmware
vmware
ESX Service Console and vMA third party updates
2010-03-03 00:00:00
ESX Service Console and vMA third party updates
2010-03-03 00:00:00
ESXi utilities and ESX Service Console third party updates
2010-05-27 00:00:00

6.8 Medium

AI Score

Confidence

Low

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:N/I:P/A:P

0.009 Low

EPSS

Percentile

82.3%

JSON
Related for PRION:CVE-2010-0290
nessus40f55ubuntucve3debiancve3cve3veracode2openvas56securityvulns6ubuntu2redhat2centos2oraclelinux2gentoo1prion2cert1checkpoint_security1seebug1osv2fedora4debian3suse2freebsd_advisory1slackware2altlinux4vmware4