Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-706-1
HistoryJan 09, 2009 - 12:00 a.m.

Bind vulnerability

2009-01-0900:00:00
ubuntu.com
39

7.7 High

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.019 Low

EPSS

Percentile

88.2%

JSON

Releases

  • Ubuntu 8.10
  • Ubuntu 8.04
  • Ubuntu 7.10
  • Ubuntu 6.06

Packages

  • bind9 -

Details

It was discovered that Bind did not properly perform signature verification.
When DNSSEC with DSA signatures are in use, a remote attacker could exploit
this to bypass signature validation to spoof DNS entries and poison DNS
caches. Among other things, this could lead to misdirected email and web
traffic.

OSVersionArchitecturePackageVersionFilename
Ubuntu8.10noarchlibdns43< 1:9.5.0.dfsg.P2-1ubuntu3.1UNKNOWN
Ubuntu8.10noarchbind9< 1:9.5.0.dfsg.P2-1ubuntu3.1UNKNOWN
Ubuntu8.10noarchbind9< host-1:9.5.0.dfsg.P2-1ubuntu3.1UNKNOWN
Ubuntu8.10noarchbind9< tils-1:9.5.0.dfsg.P2-1ubuntu3.1UNKNOWN
Ubuntu8.10noarchdnsutils< 1:9.5.0.dfsg.P2-1ubuntu3.1UNKNOWN
Ubuntu8.10noarchlibbind-dev< 1:9.5.0.dfsg.P2-1ubuntu3.1UNKNOWN
Ubuntu8.10noarchlibbind9-40< 1:9.5.0.dfsg.P2-1ubuntu3.1UNKNOWN
Ubuntu8.10noarchlibisc44< 1:9.5.0.dfsg.P2-1ubuntu3.1UNKNOWN
Ubuntu8.10noarchlibisccc40< 1:9.5.0.dfsg.P2-1ubuntu3.1UNKNOWN
Ubuntu8.10noarchlibisccfg40< 1:9.5.0.dfsg.P2-1ubuntu3.1UNKNOWN
Rows per page:
1-10 of 451

Related

nessus 35
veracode 1
openvas 43
centos 2
fedora 3
suse 1
oraclelinux 1
debian 1
redhat 1
freebsd_advisory 1
prion 2
debiancve 2
slackware 1
cve 2
gentoo 1
ubuntucve 2
f5 6
securityvulns 3
vmware 2
nessus
nessus
SuSE9 Security Update : bind (YOU Patch Number 12328)
2009-09-24 00:00:00
Scientific Linux Security Update : bind on SL3.x, SL4.x, SL5.x i386/x86_64
2012-08-01 00:00:00
openSUSE 10 Security Update : bind (bind-5915)
2009-01-22 00:00:00
veracode
veracode
DSA Certificate Validation Bypass
2020-04-10 00:34:40
openvas
openvas
CentOS Update for bind CESA-2009:0020-01 centos2 i386
2011-08-09 00:00:00
CentOS Security Advisory CESA-2009:0020-01 (bind)
2009-02-10 00:00:00
CentOS Update for bind CESA-2009:0020 centos4 i386
2011-08-09 00:00:00
centos
centos
bind security update
2009-02-02 23:32:53
bind, caching security update
2009-01-09 23:08:18
fedora
fedora
[SECURITY] Fedora 10 Update: bind-9.5.1-1.P1.fc10
2009-01-15 02:59:44
[SECURITY] Fedora 9 Update: bind-9.5.1-1.P1.fc9
2009-01-15 02:51:25
[SECURITY] Fedora 10 Update: bind-9.5.1-3.P3.fc10
2009-07-30 03:55:44
suse
suse
information disclosure in bind
2009-01-22 12:03:42
oraclelinux
oraclelinux
bind security update
2009-01-08 00:00:00
debian
debian
[SECURITY] [DSA 1703-1] New bind9 packages fix cryptographic weakness
2009-01-12 21:27:18
redhat
redhat
(RHSA-2009:0020) Moderate: bind security update
2009-01-08 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-09:04.bind
2009-01-13 00:00:00
prion
prion
Input validation
2009-01-07 17:30:00
Input validation
2009-01-26 15:30:00
debiancve
debiancve
CVE-2009-0025
2009-01-07 17:30:00
CVE-2009-0265
2009-01-26 15:30:00
slackware
slackware
bind
2009-01-14 23:14:51
cve
cve
CVE-2009-0025
2009-01-07 17:30:00
CVE-2009-0265
2009-01-26 15:30:00
gentoo
gentoo
BIND: Incorrect signature verification
2009-03-09 00:00:00
ubuntucve
ubuntucve
CVE-2009-0025
2009-01-07 00:00:00
CVE-2009-0265
2009-01-26 00:00:00
f5
f5
SOL9762 - OpenSSL vulnerability - CVE-2008-5077
2009-03-03 00:00:00
K9754 : BIND 9 vulnerability CVE-2009-0025
2013-03-25 00:00:00
SOL11503 - BIND 9 vulnerability CVE-2009-0265
2010-05-10 00:00:00
securityvulns
securityvulns
[oCERT-2008-016] Multiple OpenSSL signature verification API misuses
2009-01-09 00:00:00
OpenSSL / ntp / bind / boinc certificate validation cryptographic vulnerabilities
2009-02-10 00:00:00
About the security content of Security Update 2009-002 / Mac OS X v10.5.7
2009-05-14 00:00:00
vmware
vmware
ESX Service Console updates for openssl, bind, and vim
2009-03-31 00:00:00
ESX Service Console updates for openssl, bind, and vim
2009-03-31 00:00:00

7.7 High

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.019 Low

EPSS

Percentile

88.2%

JSON
Related for USN-706-1
nessus35veracode1openvas43centos2fedora3suse1oraclelinux1debian1redhat1freebsd_advisory1prion2debiancve2slackware1cve2gentoo1ubuntucve2f56securityvulns3vmware2