5
CVSSv2

CVE-2001-0012

Published: 12/02/2001 Updated: 10/09/2008
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

BIND 4 and BIND 8 allow remote malicious users to access sensitive information such as environment variables.

Vulnerable Product Search on Vulmon Subscribe to Product

isc bind 4.9.3

isc bind 8.2

isc bind 8.2.2

isc bind 4.9.5

isc bind 4.9.6

isc bind 4.9.7

isc bind 8.2.1

Vendor Advisories

BIND 8 suffered from several buffer overflows It is possible to construct an inverse query that allows the stack to be read remotely exposing environment variables CERT has disclosed information about these issues A new upstream version fixes this Due to the complexity of BIND we have decided to make an exception to our rule by releasing the ne ...