ISC BIND 9 Remote Denial Of Service Vulnerability

BID:4936

Info

ISC BIND 9 Remote Denial Of Service Vulnerability

Bugtraq ID: 4936
Class: Failure to Handle Exceptional Conditions
CVE: CVE-2002-0400
Remote: Yes
Local: No
Published: Jun 04 2002 12:00AM
Updated: Jul 11 2009 01:56PM
Credit: Published in a Red Hat Security Advisory.
Vulnerable: ISC BIND 9.2
+ HP HP-UX 11.11
+ HP HP-UX 11.11
+ HP HP-UX 11.0
+ HP HP-UX 11.0
+ Mandriva Linux Mandrake 8.2
+ Mandriva Linux Mandrake 8.2
+ Mandriva Linux Mandrake 8.1 ia64
 + Mandriva Linux Mandrake 8.1 ia64
 + Mandriva Linux Mandrake 8.1
+ Mandriva Linux Mandrake 8.1
+ Redhat Linux 7.3 i386
 + Redhat Linux 7.3
+ Redhat Linux 7.3
ISC BIND 9.1.3
+ Redhat Linux 7.2 ia64
 + Redhat Linux 7.2 i686
 + Redhat Linux 7.2 i586
 + Redhat Linux 7.2 i386
 + Redhat Linux 7.2
+ SuSE Linux 8.0 i386
 + SuSE Linux 8.0
+ SuSE Linux 7.3 sparc
 + SuSE Linux 7.3 ppc
 + SuSE Linux 7.3 i386
 + SuSE Linux 7.3
ISC BIND 9.1.2
+ SuSE Linux 7.2 i386
 + SuSE Linux 7.2
ISC BIND 9.1.1
+ Mandriva Linux Mandrake 8.0 ppc
 + Mandriva Linux Mandrake 8.0
ISC BIND 9.1
+ Caldera OpenUnix 8.0
+ HP Secure OS software for Linux 1.0
+ Redhat Linux 7.1 ia64
 + Redhat Linux 7.1 i386
 + Redhat Linux 7.1 alpha
 + Redhat Linux 7.1
+ SuSE Linux 7.1 x86
 + SuSE Linux 7.1 sparc
 + SuSE Linux 7.1 ppc
 + SuSE Linux 7.1 alpha
 + SuSE Linux 7.1
ISC BIND 9.0
+ SuSE Linux 7.0 sparc
 + SuSE Linux 7.0 ppc
 + SuSE Linux 7.0 i386
 + SuSE Linux 7.0 alpha
 + SuSE Linux 7.0
Not Vulnerable: ISC BIND 9.2.1
+ Caldera OpenUnix 8.0
+ MandrakeSoft Single Network Firewall 7.2
+ Mandriva Linux Mandrake 7.2
+ SCO Unixware 7.1.3

Discussion

ISC BIND 9 Remote Denial Of Service Vulnerability

BIND is a server program that implements the domain name service protocol. It is in extremely wide use on the Internet, in use by most of the DNS servers.

A vulnerability has been reported in some versions of BIND 9. Under some circumstances, the name server named may fail an internal consistancy check. As a result, the server will shut down, and is no longer available to respond to further DNS requests.

It has been reported that some HP products may ship with vulnerable versions of BIND 9, as does Caldera Open UNIX.

Exploit / POC

ISC BIND 9 Remote Denial Of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Solution / Fix

ISC BIND 9 Remote Denial Of Service Vulnerability

Solution:
HP has advised applying the patched described in Red Hat Advisory RHSA-2002:105 to HP Secure OS.

HP has released a revised version of the HPSBUX0207-202 advisory. Please see the referenced advisory for more information.

Updates are available:


ISC BIND 9.0

ISC BIND 9.1

ISC BIND 9.1.1

ISC BIND 9.1.2

ISC BIND 9.1.3

ISC BIND 9.2

References

ISC BIND 9 Remote Denial Of Service Vulnerability

References:

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report