Multiple Vendor BIND iquery buffer overflow Vulnerability
BID:134
Info
Multiple Vendor BIND iquery buffer overflow Vulnerability
| Bugtraq ID: | 134 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Unknown |
| Local: | Unknown |
| Published: | Apr 08 1998 12:00AM |
| Updated: | Apr 08 1998 12:00AM |
| Credit: | This vulnerability was first reported to the general public April 8, 1998 in a CERT advisory. Knowledge of the vulnerability was well known for several months prior to that. An exploit was posted by ([email protected]) on May 31, 1998 to the Bugtraq mail |
| Vulnerable: |
Sun Solaris 2.5.1 _x86 Sun Solaris 2.5.1 _ppc Sun Solaris 2.5.1 Sun Solaris 2.6_x86 Sun Solaris 2.6 Sun Solaris 2.5_x86 Sun Solaris 2.5 Sun Solaris 2.4 Sun Solaris 2.3 SGI IRIX 6.3 SGI IRIX 6.2 SGI IRIX 6.1 SGI IRIX 6.0.1 XFS SGI IRIX 6.0.1 SGI IRIX 6.0 SGI IRIX 5.3 XFS SGI IRIX 5.3 SGI IRIX 5.2 SGI IRIX 5.1.1 SGI IRIX 5.1 SGI IRIX 5.0.1 SGI IRIX 5.0 SGI IRIX 4.0.5 IPR SGI IRIX 4.0.5 H SGI IRIX 4.0.5 G SGI IRIX 4.0.5 F SGI IRIX 4.0.5 E SGI IRIX 4.0.5 D SGI IRIX 4.0.5 A SGI IRIX 4.0.5 (IOP) SGI IRIX 4.0.5 SGI IRIX 4.0.4 T SGI IRIX 4.0.4 B SGI IRIX 4.0.4 SGI IRIX 4.0.3 SGI IRIX 4.0.2 SGI IRIX 4.0.1 T SGI IRIX 4.0.1 SGI IRIX 4.0 SGI IRIX 3.3.3 SGI IRIX 3.3.2 SGI IRIX 3.3.1 SGI IRIX 3.3 SGI IRIX 3.2 SCO Unixware 7.0 SCO Unixware 2.1 SCO Open Server 5.0 SCO Open Desktop 3.0 Redhat Linux 5.0 Redhat Linux 4.2 Redhat Linux 4.1 Redhat Linux 4.0 NetBSD NetBSD 1.3.1 NetBSD NetBSD 1.3 NetBSD NetBSD 1.2.1 NetBSD NetBSD 1.2 NetBSD NetBSD 1.1 NetBSD NetBSD 1.0 NEC UX/4800 (64) ISC BIND 8.1.1 ISC BIND 8.1 ISC BIND 4.9.6 IBM AIX 4.3 IBM AIX 4.2.1 IBM AIX 4.2 IBM AIX 4.1.5 IBM AIX 4.1.4 IBM AIX 4.1.3 IBM AIX 4.1.2 IBM AIX 4.1.1 IBM AIX 4.1 Data General DG/UX 5.4 4.11 Data General DG/UX 5.4 4.1 Data General DG/UX 5.4 3.1 Data General DG/UX 5.4 3.0 Caldera OpenLinux Standard 1.0 BSDI BSD/OS 2.1 BSDI BSD/OS 2.0.1 BSDI BSD/OS 2.0 |
| Not Vulnerable: |
SSH Communications Security SSH 1.2.27 SGI IRIX 6.5 SGI IRIX 6.4 SCO Unixware 7.1 SCO Unixware 7.0.1 SCO Open Server 5.0.5 SCO Open Server 5.0.4 SCO Open Server 5.0.3 SCO Open Server 5.0.2 SCO Open Server 5.0.1 SCO Open Desktop 3.2 v4 Redhat Linux 5.2 i386 Redhat Linux 5.1 NetBSD NetBSD 1.4 x86 NetBSD NetBSD 1.3.3 NetBSD NetBSD 1.3.2 ISC BIND 8.1.2 ISC BIND 4.9.7 FreeBSD FreeBSD 3.3 Caldera OpenLinux Standard 1.2 Caldera OpenLinux Standard 1.1 BSDI BSD/OS 4.0 BSDI BSD/OS 3.0 |
Discussion
Multiple Vendor BIND iquery buffer overflow Vulnerability
A buffer overflow exists in certain versions of BIND, the nameserver daemon currently maintained by the Internet Software Consortium (ISC). BIND fails to properly bound the data recieved when processing an inverse query. Upon a memory copy, portions of the program can be overwritten, and arbitrary commands run on the affected host.
Exploits for this vulnerability are very widespread, and were posted to the Bugtraq mailing list.
A buffer overflow exists in certain versions of BIND, the nameserver daemon currently maintained by the Internet Software Consortium (ISC). BIND fails to properly bound the data recieved when processing an inverse query. Upon a memory copy, portions of the program can be overwritten, and arbitrary commands run on the affected host.
Exploits for this vulnerability are very widespread, and were posted to the Bugtraq mailing list.
Exploit / POC
Multiple Vendor BIND iquery buffer overflow Vulnerability
Exploit available:
Exploit available:
Solution / Fix
Multiple Vendor BIND iquery buffer overflow Vulnerability
Solution:
Upgrading to the latest version of bind, available at: http://www.isc.org/bind.html will eliminate this vulnerability.
CERT advisory CA-98.05.bind_problems.html details individual vendor responses. It also provides information about specific vendor patches.
Solution:
Upgrading to the latest version of bind, available at: http://www.isc.org/bind.html will eliminate this vulnerability.
CERT advisory CA-98.05.bind_problems.html details individual vendor responses. It also provides information about specific vendor patches.
References
Multiple Vendor BIND iquery buffer overflow Vulnerability
References:
References: