Unscored severity · published Dec 15, 2003
CVE-2003-0914
ISC BIND 8.3.x before 8.3.7, and 8.4.x before 8.4.3, allows remote attackers to poison the cache via a malicious name server that returns negative responses with a large TTL…
–
CVSS
3.8%
EPSS
No
On KEV
Description
ISC BIND 8.3.x before 8.3.7, and 8.4.x before 8.4.3, allows remote attackers to poison the cache via a malicious name server that returns negative responses with a large TTL (time-to-live) value.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.8% · higher than 90% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AI
Aix · Ibm
5.1l · source: NVD
BI
Bind · Isc
8.2.3; 8.2.4; 8.2.5; 8.2.6; 8.2.7; 8.3.0; +8 more · source: NVD
FR
Freebsd · Freebsd
4.4; 4.5; 4.6; 4.6.2; 4.7; 4.8; +2 more · source: NVD
HP
Hp-ux · HP
11.00; 11.11 · source: NVD
NA
Namesurfer · Nixu
standard_3.0.1; suite_3.0.1 · source: NVD
NE
Netbsd · Netbsd
1.6; 1.6.1; current · source: NVD
SO
Solaris · Sun
7.0; 8.0; 9.0; 9.0 · source: NVD
SU
Sunos · Sun
5.7; 5.8 · source: NVD
TR
Tru64 · Compaq
4.0f; 4.0f_pk6_bl17; 4.0f_pk7_bl18; 4.0f_pk8_bl22; 4.0g; 4.0g_pk3_bl17; +15 more · source: NVD
UN
Unixware · Sco
7.1.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2003-0914
CVE.org
https://www.cve.org/CVERecord?id=CVE-2003-0914
secunia.com
http://secunia.com/advisories/10542
sunsolve.sun.com
http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57434
Patch
http://www.debian.org/security/2004/dsa-409
Patch
http://www.kb.cert.org/vuls/id/734644
More from Tru64
–
CVE-2005-0223
The Software Development Kit (SDK) and Run Time Environment (RTE) 1.4.1 and 1.4.2 for Tru64 UNIX allows remote attackers to cause a denial of service (Java Virtual Machine hang)…
–
CVE-2003-0724
ssh on HP Tru64 UNIX 5.1B and 5.1A does not properly handle RSA signatures when digital certificates and RSA keys are used, which could allow local and remote attackers to gain…
–
CVE-2003-0688
The DNS map code in Sendmail 8.12.8 and earlier, when using the "enhdnsbl" feature, does not properly initialize certain data structures, which allows remote attackers to cause a…
–
CVE-2003-0694
The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c
–
CVE-2003-0196
Multiple buffer overflows in Samba before 2.2.8a may allow remote attackers to execute arbitrary code or cause a denial of service, as discovered by the Samba team and a different…