Denial Of Service (DoS)

2020-04-1000:28:30

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

4.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

JSON

bind is vulnerable to denial of service (DoS). The vulnerability exists as it was discovered that the bind packages created the “rndc.key” file with insecure file permissions. This allowed any local user to read the content of this file. A local user could use this flaw to control some aspects of the named daemon by using the rndc utility, for example, stopping the named daemon. This problem did not affect systems with the bind-chroot package installed.

CPENameOperatorVersion
bindeq9.3.3__9.0.1.el5
bindeq9.3.3__7.el5
bindeq9.3.3__8.el5
bindeq9.3.3__10.el5
bindeq9.3.3__9.0.1.el5
bindeq9.3.3__7.el5
bindeq9.3.3__8.el5
bindeq9.3.3__10.el5

Name	Operator	Version
bind	eq	9.3.3__9.0.1.el5
bind	eq	9.3.3__7.el5
bind	eq	9.3.3__8.el5
bind	eq	9.3.3__10.el5
bind	eq	9.3.3__9.0.1.el5
bind	eq	9.3.3__7.el5
bind	eq	9.3.3__8.el5
bind	eq	9.3.3__10.el5