ISC BIND CVE-2017-3141 Local Privilege Escalation Vulnerability
BID:99089
CVE-2017-3141 |Info
ISC BIND CVE-2017-3141 Local Privilege Escalation Vulnerability
| Bugtraq ID: | 99089 |
| Class: | Configuration Error |
| CVE: |
CVE-2017-3141 |
| Remote: | No |
| Local: | Yes |
| Published: | Jun 14 2017 12:00AM |
| Updated: | Aug 17 2017 08:10AM |
| Credit: | John Page (hyp3rlinx) |
| Vulnerable: |
ISC BIND 9.4.3 P3 ISC BIND 9.4.3 ISC BIND 9.4.1 -P1 ISC BIND 9.4.1 ISC BIND 9.4 rc2 ISC BIND 9.4 rc1 ISC BIND 9.4 b4 ISC BIND 9.4 b3 ISC BIND 9.4 b2 ISC BIND 9.4 b1 ISC BIND 9.4 a6 ISC BIND 9.4 a5 ISC BIND 9.4 a4 ISC BIND 9.4 a3 ISC BIND 9.4 a2 ISC BIND 9.4 a1 ISC BIND 9.4 ISC BIND 9.3.6 ISC BIND 9.3.5 ISC BIND 9.3.4 ISC BIND 9.3.3 rc3 ISC BIND 9.3.3 rc2 ISC BIND 9.3.3 rc1 ISC BIND 9.3.3 b1 ISC BIND 9.3.3 b ISC BIND 9.3.3 ISC BIND 9.3.2 -P2 ISC BIND 9.3.2 -P1 ISC BIND 9.2.8 ISC BIND 9.2.7 rc3 ISC BIND 9.2.7 rc2 ISC BIND 9.2.7 rc1 ISC BIND 9.2.7 b1 ISC BIND 9.2.7 ISC BIND 9.2.6 -P2 ISC BIND 9.4.3b2 ISC BIND 9.4.3-P5 ISC BIND 9.4.3-P4 ISC BIND 9.4.3-P1 ISC BIND 9.4.2-P2-W2 ISC BIND 9.4.2-P2-W1 ISC BIND 9.4.2-P2 ISC BIND 9.3.5-P2-W2 ISC BIND 9.3.5-P2-W1 ISC BIND 9.3.5-P2 Gentoo Linux |
| Not Vulnerable: | |
Discussion
ISC BIND CVE-2017-3141 Local Privilege Escalation Vulnerability
ISC BIND is prone to a local privilege-escalation vulnerability.
A local attacker can exploit this issue to gain elevated root privileges.
ISC BIND 9.2.6-P2 through 9.2.9, 9.3.2-P1 through 9.3.6, 9.4.0 through 9.8.8, 9.9.0 through 9.9.10, 9.10.0 through 9.10.5, 9.11.0 through 9.11.1, 9.9.3-S1 through 9.9.10-S1, and 9.10.5-S1 are vulnerable.
ISC BIND is prone to a local privilege-escalation vulnerability.
A local attacker can exploit this issue to gain elevated root privileges.
ISC BIND 9.2.6-P2 through 9.2.9, 9.3.2-P1 through 9.3.6, 9.4.0 through 9.8.8, 9.9.0 through 9.9.10, 9.10.0 through 9.10.5, 9.11.0 through 9.11.1, 9.9.3-S1 through 9.9.10-S1, and 9.10.5-S1 are vulnerable.
Exploit / POC
ISC BIND CVE-2017-3141 Local Privilege Escalation Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
ISC BIND CVE-2017-3141 Local Privilege Escalation Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
ISC BIND CVE-2017-3141 Local Privilege Escalation Vulnerability
References:
References:
- ISC BIND Homepage (ISC)
- Bug 1461310 - (CVE-2017-3141) CVE-2017-3141 bind: BIND installer on Windows uses (Red Hat Bugzilla)
- CVE-2017-3141 (Red Hat Bugzilla)
- CVE-2017-3141: Windows service and uninstall paths are not quoted when BIND is i (ISC)