|
ISC BIND Query Port DNS Cache Poisoning
|
|
|
|
|
Secunia Advisory:
|
SA30973
|
|
|
Release Date:
|
2008-07-09
|
|
Last Update:
|
2008-09-05
|
|
|
Critical:
|
Moderately critical
|
|
Impact:
|
Spoofing
|
|
Where:
|
From remote
|
|
Solution Status:
|
Vendor Patch
|
|
| Software: | ISC BIND 8.x.x
ISC BIND 9.2.x
ISC BIND 9.3.x
ISC BIND 9.4.x
ISC BIND 9.5.x
|
| | CVE reference: | CVE-2008-1447 (Secunia mirror)
|
|
|
Want to know the next time vulnerabilities are fixed in this product?
- Companies can be alerted via email and SMS! |
|
|
Description:
A vulnerability has been reported in ISC BIND, which can be exploited by malicious people to poison the DNS cache.
The vulnerability is caused due to the DNS servers not sufficiently randomising the DNS query port number, which can be exploited to poison the DNS cache.
The vulnerability is reported in all BIND 8 and 9 versions when running as caching resolver.
Solution:
Update to version 9.5.0-P2, 9.4.2-P2, 9.4.2-P2-W1, or 9.3.5-P2 to expand the query port range to mitigate attacks.
Use DNSSEC.
Provided and/or discovered by:
Dan Kaminsky, IOActive
Changelog:
2008-08-04: Updated "Solution" section as the vendor issued updated versions to e.g. fix a performance problem within the previous patches. Added links to "Original Advisory" section.
2008-09-05: Updated "Solution" section as the vendor issued an updated version 9.4.2-P2 for the Windows platform, which fixes scalability issues due to changes in BIND 9.4.2-P1 and -P2. Added link to "Original Advisory" section.
Original Advisory:
http://www.isc.org/index.pl?/sw/bind/bind-security.php
http://www.isc.org/index.pl?/sw/bind/view/?release=9.5.0-P2
http://www.isc.org/index.pl?/sw/bind/view/?release=9.4.2-P2
http://www.isc.org/index.pl?/sw/bind/view/?release=9.3.5-P2
http://marc.info/?l=bind-announce&m=122056040831292&w=2
Other References:
US-CERT VU#800113:
http://www.kb.cert.org/vuls/id/800113
|
|
|
|
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
|
|
|
13 Related Secunia Security Advisories, displaying 10
|
|
|
1. ISC BIND libbind "inet_network()" Off-By-One Vulnerability
|
|
2. BIND 8 Predictable DNS Query IDs Vulnerability
|
|
3. BIND Predictable DNS Query IDs Vulnerability
|
|
4. ISC BIND "query_addsoa" Denial of Service
|
|
5. ISC BIND Denial of Service Vulnerabilities
|
|
6. BIND OpenSSL Vulnerabilities
|
|
7. ISC BIND Denial of Service Vulnerabilities
|
|
8. BIND Zone Transfer TSIG Handling Denial of Service
|
|
9. BIND "q_usedns" Array Buffer Overflow Vulnerability
|
|
10. BIND Validator Denial of Service Vulnerability
|
Show all related advisories
|
|
|
Send Feedback to Secunia
|
|
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.
Ideas, suggestions, and other feedback are most welcome.
|
|
|
|
