4.3
CVSSv2

CVE-2003-0914

Published: 15/12/2003 Updated: 30/10/2018
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

ISC BIND 8.3.x prior to 8.3.7, and 8.4.x prior to 8.4.3, allows remote malicious users to poison the cache via a malicious name server that returns negative responses with a large TTL (time-to-live) value.

Vulnerable Product Search on Vulmon Subscribe to Product

isc bind 8.4.1

isc bind 8.2.5

isc bind 8.3.1

isc bind 8.3.2

nixu namesurfer suite 3.0.1

isc bind 8.3.4

isc bind 8.2.7

isc bind 8.2.4

isc bind 8.2.6

isc bind 8.3.5

nixu namesurfer standard 3.0.1

isc bind 8.3.0

isc bind 8.3.3

isc bind 8.3.6

isc bind 8.4

isc bind 8.2.3

netbsd netbsd 1.6

hp hp-ux 11.11

compaq tru64 5.1 pk3 bl17

compaq tru64 5.1 pk4 bl18

netbsd netbsd current

netbsd netbsd 1.6.1

compaq tru64 5.1b pk1 bl1

sun sunos 5.7

compaq tru64 4.0f pk6 bl17

compaq tru64 4.0g

compaq tru64 4.0g pk3 bl17

compaq tru64 5.1a pk4 bl21

freebsd freebsd 4.5

sun sunos 5.8

freebsd freebsd 4.7

compaq tru64 4.0f pk8 bl22

sun solaris 9.0

hp hp-ux 11.00

compaq tru64 5.1a pk3 bl3

compaq tru64 4.0f

freebsd freebsd 4.4

sun solaris 7.0

compaq tru64 5.1 pk6 bl20

compaq tru64 5.1 pk5 bl19

sco unixware 7.1.1

freebsd freebsd 4.8

compaq tru64 5.1b pk2 bl22

compaq tru64 5.1a

compaq tru64 4.0g pk4 bl22

freebsd freebsd 4.6

compaq tru64 5.1a pk5 bl23

compaq tru64 5.1b

compaq tru64 5.1

compaq tru64 5.1a pk2 bl2

ibm aix 5.1l

freebsd freebsd 5.0

compaq tru64 4.0f pk7 bl18

freebsd freebsd 4.9

compaq tru64 5.1a pk1 bl1

freebsd freebsd 4.6.2

sun solaris 8.0

Vendor Advisories

A vulnerability was discovered in BIND, a domain name server, whereby a malicious name server could return authoritative negative responses with a large TTL (time-to-live) value, thereby rendering a domain name unreachable A successful attack would require that a vulnerable BIND instance submit a query to a malicious nameserver The bind9 package ...