Nessus Plugin #15246

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

[DSA409] DSA-409-1 bind

Family:

Debian Local Security Checks

Category:

infos

Copyright:

This script is (C) 2004 Michel Arboi

Summary:

DSA-409-1 bind

Version:

$Revision: 1.4 $

Cve_id:

CAN-2003-0914

Bugtraq_id:

9114

Xrefs:

DSA:409, CERT:734644

Description:

A vulnerability was discovered in BIND, a domain name server, whereby
a malicious name server could return authoritative negative responses
with a large TTL (time-to-live) value, thereby rendering a domain name
unreachable. A successful attack would require that a vulnerable BIND
instance submit a query to a malicious nameserver.
The bind9 package is not affected by this vulnerability.
For the current stable distribution (woody) this problem has been
fixed in version 1:8.3.3-2.0woody2.
For the unstable distribution (sid) this problem has been fixed in
version 1:8.4.3-1.
We recommend that you update your bind package.


Solution : http://www.debian.org/security/2004/dsa-409
Risk factor : High