CVE-2007-0494 - Secunia

Blog

Careers

Secunia SmallBusiness

Products

Solutions

Customers

Partner

Resources

Company

Careers

Community

CVE Reference: CVE-2007-0494
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2007-0494

Description: ISC BIND 9.0.x, 9.1.x, 9.2.0 up to 9.2.7, 9.3.0 up to 9.3.3, 9.4.0a1 up to 9.4.0a6, 9.4.0b1 up to 9.4.0b4, 9.4.0rc1, and 9.5.0a1 (Bind Forum only) allows remote attackers to cause a denial of service (exit) via a type * (ANY) DNS query response that contains multiple RRsets, which triggers an assertion error, aka the "DNSSEC Validation" vulnerability.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/31838 UBUNTU http://www.ubuntu.com/usn/usn-418-1 TRUSTIX http://www.trustix.org/errata/2007/0005 SUSE http://lists.suse.com/archive/suse-security-announce/2007-Jan/0016.html SUNALERT http://sunsolve.sun.com/search/document.do?assetkey=1-26-102969-1 ST 1017573 SLACKWARE http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.494157 SGI SAID Secunia Advisory: SA27706 Secunia Advisory: SA26909 Secunia Advisory: SA25482 Secunia Advisory: SA24284 Secunia Advisory: SA25715 Secunia Advisory: SA25649 Secunia Advisory: SA25402 Secunia Advisory: SA24930 Secunia Advisory: SA24950 Secunia Advisory: SA24648 Secunia Advisory: SA24203 Secunia Advisory: SA24129 Secunia Advisory: SA24048 Secunia Advisory: SA24083 Secunia Advisory: SA24014 Secunia Advisory: SA24054 Secunia Advisory: SA23977 Secunia Advisory: SA23974 Secunia Advisory: SA23943 Secunia Advisory: SA23944 Secunia Advisory: SA23924 Secunia Advisory: SA23972 Secunia Advisory: SA23904 REDHAT http://www.redhat.com/support/errata/RHSA-2007-0057.html http://www.redhat.com/support/errata/RHSA-2007-0044.html OVAL http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11523 OPENPKG http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.007.html NETBSD http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2007-003.txt.asc MLIST http://marc.theaimsgroup.com/?l=bind-announce&m=116968519300764&w=2 MANDRIVA http://www.mandriva.com/security/advisories?name=MDKSA-2007:030 HP http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01070495 GENTOO http://security.gentoo.org/glsa/glsa-200702-06.xml FULLDISC http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html FREEBSD http://security.freebsd.org/advisories/FreeBSD-SA-07:02.bind.asc FEDORA http://fedoranews.org/cms/node/2507 http://fedoranews.org/cms/node/2537 DEBIAN http://www.debian.org/security/2007/dsa-1254 CONFIRM http://www.isc.org/index.pl?/sw/bind/view/?release=9.3.4 http://docs.info.apple.com/article.html?artnum=305530 http://support.avaya.com/elmodocs2/security/ASA-2007-125.htm http://www.isc.org/index.pl?/sw/bind/bind-security.php http://www.isc.org/index.pl?/sw/bind/view/?release=9.2.8 BID 22231 APPLE http://lists.apple.com/archives/security-announce/2007/May/msg00004.html AIXAPAR http://www-1.ibm.com/support/docview.wss?uid=isg1IY95619 http://www-1.ibm.com/support/docview.wss?uid=isg1IY96144 http://www-1.ibm.com/support/docview.wss?uid=isg1IY96324 http://www-1.ibm.com/support/docview.wss?uid=isg1IY95618

Return to the previous page.

Products

Solutions

Customers

Partner

Resources

Company

Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)

Industry
Compliance
Technology
Integration

Customers
Testimonials

VARS
MSSP
Technology Partners
References

Factsheets
Reports
Webinars
Events

About us
Careers
Memberships
Newsroom

© 2002-2013 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability