Bind Security Vulnerabilities and Issues — Bind CVE List

Lucene search

IscBind

2 matches found

CVE•added 2009/01/07 5:30 p.m.•235 views

CVE-2009-0025

BIND 9.6.0, 9.5.1, 9.5.0, 9.4.3, and earlier does not properly check the return value from the OpenSSL DSA_verify function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077.

6.8CVSS7.1AI score0.03902EPSS

CVE•added 2009/01/26 3:30 p.m.•172 views

CVE-2009-0265

Internet Systems Consortium (ISC) BIND 9.6.0 and earlier does not properly check the return value from the OpenSSL EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077 and CV...

7.5CVSS7.6AI score0.03902EPSS