exploits , vulnerabilities , articles , ISC BIND DNS Resolver Buffer Overflow Vulnerability

Title	ISC BIND DNS Resolver Buffer Overflow Vulnerability
Published	2002-11-12-12:00AM
Updated	2004-11-30-06:36PM
Class	Boundary Condition Error
CVE	CAN-2002-0029
Remote	Yes
Local	No
Credit	This vulnerability was reported by ISC.
Vulnerable	Xerox DocuPrint NPS/IPS Series 8.0 Xerox DocuPrint NPS/IPS Series 7.x Sun Solaris 2.6 _x86 Sun Solaris 2.6 Sun Solaris 2.5.1 _x86 Sun Solaris 2.5.1 _ppc Sun Solaris 2.5.1 SGI IRIX 6.5.18 SGI IRIX 6.5.17 SGI IRIX 6.5.16 SGI IRIX 6.5.15 SGI IRIX 6.5.14 SGI IRIX 6.5.13 SGI IRIX 6.5.12 SGI IRIX 6.5.11 SGI IRIX 6.5.10 SGI IRIX 6.5.9 SGI IRIX 6.5.8 SGI IRIX 6.5.7 SGI IRIX 6.5.6 SGI IRIX 6.5.5 SGI IRIX 6.5.4 SGI IRIX 6.5.3 SGI IRIX 6.5.2 SGI IRIX 6.5.1 SGI IRIX 6.5 RedHat Enterprise Linux WS 2.1 IA64 RedHat Enterprise Linux WS 2.1 RedHat Enterprise Linux ES 2.1 IA64 RedHat Enterprise Linux ES 2.1 RedHat Enterprise Linux AS 2.1 IA64 RedHat Enterprise Linux AS 2.1 RedHat Advanced Workstation for the Itanium Processor 2.1 IA64 RedHat Advanced Workstation for the Itanium Processor 2.1 ISC BIND 4.9.10 ISC BIND 4.9.9 ISC BIND 4.9.8 ISC BIND 4.9.7 HP HPUX 10.10 HP HPUX 10.20 HP HPUX 10.24 HP HPUX 11.0 HP HPUX 11.0 4 ISC BIND 4.9.6 ISC BIND 4.9.5 ISC BIND 4.9.4 ISC BIND 4.9.3 ISC BIND 4.9.2 IBM AIX 5.2 IBM AIX 5.1 IBM AIX 4.3.3 HP HPUX 11.11 HP HPUX 11.0 4 HP HPUX 11.0 HP HPUX 10.20 HP HPUX 10.10 GNU glibc 2.2.5 Debian Linux 3.0 Debian Linux 3.0 alpha Debian Linux 3.0 arm Debian Linux 3.0 hppa Debian Linux 3.0 ia32 Debian Linux 3.0 ia64 Debian Linux 3.0 m68k Debian Linux 3.0 mips Debian Linux 3.0 mipsel Debian Linux 3.0 ppc Debian Linux 3.0 s/390 Debian Linux 3.0 sparc Gentoo Linux 0.5 Gentoo Linux 0.7 MandrakeSoft Corporate Server 2.1 MandrakeSoft Corporate Server 2.1 x86_64 MandrakeSoft Linux Mandrake 9.0 RedHat Linux 7.3 RedHat Linux 7.3 i386 Slackware Linux 8.1 GNU glibc 2.2 S.u.S.E. Linux 7.1 S.u.S.E. Linux 7.1 alpha S.u.S.E. Linux 7.1 ppc S.u.S.E. Linux 7.1 sparc S.u.S.E. Linux 7.1 x86 Wirex Immunix OS 7 Compaq Tru64 5.1 b PK1 (BL1) Compaq Tru64 5.1 b Compaq Tru64 5.1 a PK3 (BL3) Compaq Tru64 5.1 a PK2 (BL2) Compaq Tru64 5.1 a PK1 (BL1) Compaq Tru64 5.1 a Compaq Tru64 5.1 PK5 (BL19) Compaq Tru64 5.1 PK4 (BL18) Compaq Tru64 5.1 PK3 (BL17) Compaq Tru64 5.1 Compaq Tru64 5.0 a PK3 (BL17) Compaq Tru64 5.0 a Compaq Tru64 4.0 g PK3 (BL17) Compaq Tru64 4.0 g Compaq Tru64 4.0 f PK7 (BL18) Compaq Tru64 4.0 f PK6 (BL17) Compaq Tru64 4.0 f Avaya S8700 R2.0.1 Avaya S8700 R2.0.0 Avaya S8500 R2.0.1 Avaya S8500 R2.0.0 Avaya S8300 R2.0.1 Avaya S8300 R2.0.0 Avaya Intuity LX Avaya Converged Communications Server 2.0 Astaro Security Linux 3.2 11 Astaro Security Linux 3.2 10 Astaro Security Linux 3.2 00 Astaro Security Linux 2.0 30 Astaro Security Linux 2.0 27 Astaro Security Linux 2.0 26 Astaro Security Linux 2.0 25 Astaro Security Linux 2.0 24 Astaro Security Linux 2.0 23 Astaro Security Linux 2.0 16
Not Vulnerable	SGI IRIX 6.5.19 ISC BIND 9.2.1 Caldera OpenUnix 8.0 MandrakeSoft Linux Mandrake 7.2 MandrakeSoft Single Network Firewall 7.2 SCO Unixware 7.1.3 ISC BIND 9.2 .0 Conectiva Linux 8.0 HP HP-UX 11.0 HP HP-UX 11.11 MandrakeSoft Linux Mandrake 8.1 MandrakeSoft Linux Mandrake 8.1 ia64 MandrakeSoft Linux Mandrake 8.2 RedHat Linux 7.3 RedHat Linux 7.3 i386 ISC BIND 9.1.3 RedHat Linux 7.2 RedHat Linux 7.2 i386 RedHat Linux 7.2 i586 RedHat Linux 7.2 i686 RedHat Linux 7.2 ia64 S.u.S.E. Linux 7.3 S.u.S.E. Linux 7.3 i386 S.u.S.E. Linux 7.3 ppc S.u.S.E. Linux 7.3 sparc S.u.S.E. Linux 8.0 S.u.S.E. Linux 8.0 i386 ISC BIND 9.1.2 Conectiva Linux 7.0 S.u.S.E. Linux 7.2 S.u.S.E. Linux 7.2 i386 ISC BIND 9.1.1 MandrakeSoft Linux Mandrake 8.0 MandrakeSoft Linux Mandrake 8.0 ppc ISC BIND 9.1 Caldera OpenUnix 8.0 HP Secure OS software for Linux 1.0 RedHat Linux 7.1 RedHat Linux 7.1 alpha RedHat Linux 7.1 i386 RedHat Linux 7.1 ia64 S.u.S.E. Linux 7.1 S.u.S.E. Linux 7.1 alpha S.u.S.E. Linux 7.1 ppc S.u.S.E. Linux 7.1 sparc S.u.S.E. Linux 7.1 x86 ISC BIND 9.0 S.u.S.E. Linux 7.0 S.u.S.E. Linux 7.0 alpha S.u.S.E. Linux 7.0 i386 S.u.S.E. Linux 7.0 ppc S.u.S.E. Linux 7.0 sparc ISC BIND 8.3.3 Apple Mac OS X 10.1 Apple Mac OS X 10.1 Apple Mac OS X 10.1.1 Apple Mac OS X 10.1.2 Apple Mac OS X 10.1.3 Apple Mac OS X 10.1.4 Apple Mac OS X 10.1.5 Apple Mac OS X 10.2 Apple Mac OS X 10.2.1 Apple Mac OS X 10.2.2 Apple Mac OS X Server 10.0 Apple Mac OS X Server 10.2 Apple Mac OS X Server 10.2.1 Apple Mac OS X Server 10.2.2 Debian Linux 3.0 FreeBSD FreeBSD 4.7 FreeBSD FreeBSD 4.7 -RELEASE MandrakeSoft Linux Mandrake 7.2 MandrakeSoft Single Network Firewall 7.2 OpenPKG OpenPKG Current OpenPKG OpenPKG 1.1 ISC BIND 8.3.2 FreeBSD FreeBSD 4.6 FreeBSD FreeBSD 4.6 -RELEASE ISC BIND 8.3.1 ISC BIND 8.3 .0 ISC BIND 8.2.6 Conectiva Linux 6.0 OpenPKG OpenPKG 1.0 Trustix Secure Linux 1.2 Trustix Secure Linux 1.5 ISC BIND 8.2.5 OpenPKG OpenPKG 1.0 Trustix Secure Linux 1.5 ISC BIND 8.2.4 S.u.S.E. Linux 7.3 S.u.S.E. Linux 7.3 ppc S.u.S.E. Linux 7.3 sparc S.u.S.E. Linux 8.0 S.u.S.E. Linux 8.1 Trustix Secure Linux 1.2 ISC BIND 8.2.3 Caldera OpenLinux Server 3.1 Caldera OpenLinux Server 3.1.1 Caldera OpenLinux Workstation 3.1 Caldera OpenLinux Workstation 3.1.1 Debian Linux 2.2 EnGarde Secure Linux 1.0.1 Immunix Immunix OS 7 ISC BIND 8.2.2 ISC BIND 8.2.1 ISC BIND 8.2 - Caldera OpenLinux 1.3 - Caldera OpenLinux 2.2 - Caldera UnixWare 7.1.1 - IBM AIX 4.3 - IBM AIX 4.3.1 - IBM AIX 4.3.2 - IBM AIX 4.3.3 - RedHat Linux 4.0 - RedHat Linux 4.1 - RedHat Linux 4.2 - RedHat Linux 5.0 - RedHat Linux 5.1 - RedHat Linux 5.2 i386 - RedHat Linux 6.0 - RedHat Linux 6.1 i386 - Slackware Linux 4.0 ISC BIND 8.1 Astaro Security Linux 3.2 12
Code	Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: content@securitydot.net <mailto:content@securitydot.net>.
TXT

Vulnerabilities - newest 10 RSS | More

2008-10-10 CUPS Multiple Heap Based Buffer Overflow Vulnerabilities
2008-10-10 Sun Java System Web Proxy Server FTP Subsytem Heap Based Buffer Overflow Vulnerability
2008-10-09 ModSecurity Transformation Caching Security Bypass Vulnerability
2008-10-09 DATAC RealWin SCADA Server Remote Stack Buffer Overflow Vulnerability
2008-10-09 Avaya Communication Manager Web Administration Multiple Security Vulnerabilities
2008-10-09 HP System Management Homepage (SMH) for Linux and Windows Cross Site Scripting Vulnerability
2008-10-09 YaCy Multiple Unspecified Vulnerabilities
2008-10-09 Opera Cached Java Applet Security Bypass Vulnerability
2008-10-09 WOW Raid Manager Unspecified Cross Site Scripting Vulnerability
2008-10-09 Drupal EveryBlog Module Multiple Unspecified Vulnerabilities