FreeBSD -- BIND named(8) cache poisoning with DNSSEC validation

Problem Description: If a client requests DNSSEC records with the Checking Disabled CD flag set, BIND may cache the unvalidated responses. These responses may later be returned to another client that has not set the CD flag...

FreeBSD-SA-10:01.bind

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-10:01.bind Security Advisory The FreeBSD Project Topic: BIND named8 cache poisoning with DNSSEC validation Category: contrib Module: bind Announced: 2010-01-06...

Debian Security Advisory DSA 1961-1 (bind9)

The remote host is missing an update to bind9 announced via advisory DSA 1961-1. OpenVAS Vulnerability Test $Id: deb19611.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1961-1 bind9 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

[SECURITY] [DSA 1963-1] New unbound packages fix DNSSEC validation

------------------------------------------------------------------------ Debian Security Advisory DSA-1963-1 [email protected] http://www.debian.org/security/ Florian Weimer December 23, 2009 http://www.debian.org/security/faq -...

DSA-1963-1 unbound - DNSSEC validation

Bulletin has no description...

SOL10898 - DNSSEC BIND vulnerability - CVE-2009-4022

Vulnerability description and product information: Unspecified vulnerability in ISC BIND 9.4 before 9.4.3-P4, 9.5 before 9.5.2-P1, 9.6 before 9.6.1-P2, 9.7 beta before 9.7.0b3, and 9.0.x through 9.3.x with DNSSEC validation enabled and checking disabled CD, allows remote attackers to conduct DNS...

SuSE Security Advisory SUSE-SA:2009:059 (bind)

The remote host is missing updates announced in advisory SUSE-SA:2009:059. OpenVAS Vulnerability Test $Id: susesa2009059.nasl 6668 2017-07-11 13:34:29Z cfischer $ Description: Auto-generated from advisory SUSE-SA:2009:059 bind Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

SUSE: Security Advisory for bind (SUSE-SA:2009:059)

The remote host is missing updates announced in advisory SUSE-SA:2009:059. Copyright C 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software...

Ubuntu: Security Advisory (USN-865-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 / 9.10 : bind9 vulnerability (USN-865-1)

Michael Sinatra discovered that Bind did not correctly validate certain records added to its cache. When DNSSEC validation is in use, a remote attacker could exploit this to spoof DNS entries and poison DNS caches. Among other things, this could lead to misdirected email and web traffic. Note tha...

USN-865-1: Bind vulnerability

Michael Sinatra discovered that Bind did not correctly validate certain records added to its cache. When DNSSEC validation is in use, a remote attacker could exploit this to spoof DNS entries and poison DNS caches. Among other things, this could lead to misdirected email and web traffic...

Mandriva Linux Security Advisory : bind (MDVSA-2009:313-1)

Some vulnerabilities were discovered and corrected in bind : Unspecified vulnerability in ISC BIND 9.4 before 9.4.3-P4, 9.5 before 9.5.2-P1, 9.6 before 9.6.1-P2, 9.7 beta before 9.7.0b3, and 9.0.x through 9.3.x with DNSSEC validation enabled and checking disabled CD, allows remote attackers to...

ISC BIND 9 Haunted by Cache Poisoning Flaw

The Internet Systems Consortium ISC has shipped a patch to cover a “severe” cache poisoning vulnerability for BIND 9 users who have DNSSEC validation turned on. The vulnerability exists in the way BIND 9 handles recursive client queries that may cause additional records to be added to its cache...

Fedora Core 11 FEDORA-2009-12218 (bind)

The remote host is missing an update to bind announced via advisory FEDORA-2009-12218. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora Core 11 FEDORA-2009-12218 (bind)

The remote host is missing an update to bind announced via advisory FEDORA-2009-12218. OpenVAS Vulnerability Test $Id: fcore200912218.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-12218 bind Authors: Thomas Reinke Copyright: Copyright c 2009 E-Sof...

ISC BIND 9 DNSSEC Cache Poisoning

According to its version number, the remote installation of BIND suffers from a cache poisoning vulnerability. This issue affects all versions prior to 9.4.3-P5, 9.5.2-P2 or 9.6.1-P3. Note that only nameservers that allow recursive queries and validate DNSSEC records are affected. Nessus has not...

openSUSE Security Update : bind (bind-1615)

The bind DNS server was updated to close a possible cache poisoning vulnerability which allowed to bypass DNSSEC. CVE-2009-4022: CVSS v2 Base Score: 2.6 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Securit...

openSUSE Security Update : bind (bind-1615)

The bind DNS server was updated to close a possible cache poisoning vulnerability which allowed to bypass DNSSEC. CVE-2009-4022: CVSS v2 Base Score: 2.6 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Securit...

RHEL 5 : bind (RHSA-2009:1620)

"Updated bind packages that fix one security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS...

Fedora 12 : bind-9.6.1-13.P2.fc12 (2009-12233)

Update to 9.6.1-P2 release which contains following fix: Additional section of response could be cached without successful DNSSEC validation even if DNSSEC validation is enabled Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security...