Published: 06/12/2010 Updated: 04/04/2016

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 515

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

named in ISC BIND 9.7.2-P2 does not check all intended locations for allow-query ACLs, which might allow remote malicious users to make successful requests for private DNS records via the standard DNS query mechanism.

Vulnerable Product	Search on Vulmon	Subscribe to Product
isc bind 9.7.2

Debian Bug report logs - #605876 BIND 972-P3 (CVE-2010-3613, CVE-2010-3614 and CVE-2010-3615) Package: bind9; Maintainer for bind9 is Debian DNS Team <team+dns@trackerdebianorg>; Source for bind9 is src:bind9 (PTS, buildd, popcon) Reported by: Hideki Yamane <henrich@debianorjp> Date: Sat, 4 Dec 2010 10:51:01 U ...

Debian Bug report logs - #599515 bind9: CVE-2010-3762 Package: bind9; Maintainer for bind9 is Debian DNS Team <team+dns@trackerdebianorg>; Source for bind9 is src:bind9 (PTS, buildd, popcon) Reported by: Moritz Muehlenhoff <muehlenhoff@univentionde> Date: Fri, 8 Oct 2010 10:33:01 UTC Severity: grave Tags: securi ...

For each available CPE the script prints out known vulns (links to the correspondent info) and correspondent CVSS scores.

nmap -sV --script vulners [--script-args mincvss=<arg_val>] <target>

53/tcp   open     domain             ISC BIND DNS
| vulners:
|   ISC BIND DNS:
|     CVE-2012-1667    8.5    https://vulners.com/cve/CVE-2012-1667
|     CVE-2002-0651    7.5    https://vulners.com/cve/CVE-2002-0651
|     CVE-2002-0029    7.5    https://vulners.com/cve/CVE-2002-0029
|     CVE-2015-5986    7.1    https://vulners.com/cve/CVE-2015-5986
|     CVE-2010-3615    5.0    https://vulners.com/cve/CVE-2010-3615
|     CVE-2006-0987    5.0    https://vulners.com/cve/CVE-2006-0987
|_    CVE-2014-3214    5.0    https://vulners.com/cve/CVE-2014-3214

CWE-264 http://www.isc.org/software/bind/advisories/cve-2010-3615 http://www.vupen.com/english/advisories/2010/3102 http://secunia.com/advisories/42458 http://www.kb.cert.org/vuls/id/510208 http://www.securityfocus.com/bid/45134 http://www.isc.org/announcement/guidance-regarding-dec-1st-2010-security-advisories http://securitytracker.com/id?1024817 http://osvdb.org/69568 http://lists.fedoraproject.org/pipermail/package-announce/2010-December/051963.html http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.622190 http://secunia.com/advisories/42671 https://nvd.nist.gov https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=605876 https://www.kb.cert.org/vuls/id/510208

CVE-2010-3615

Vulnerability Summary

Vendor Advisories

Nmap Scripts

References

Vulmon Search

About

Products

Connect