ISC BIND 8 Remote Cache Poisoning Vulnerability

Bugtraq ID: 25459
Class: Design Error
CVE: CVE-2007-2930
Remote: Yes
Local: No
Published: Aug 27 2007 12:00AM
Updated: May 05 2008 11:26PM
Credit: Amit Klein discovered this vulnerability.
Vulnerable: Sun Solaris 9_x86
Sun Solaris 9
Sun Solaris 8_x86
Sun Solaris 8_sparc
Nortel Networks Self-Service Speech Server 0
Nortel Networks Self-Service Peri Application 0
Nortel Networks Self-Service MPS 500 0
Nortel Networks Self-Service MPS 1000 0
Nortel Networks Self-Service MPS 100 0
Nortel Networks Self-Service - CCSS7 0
Nortel Networks Enterprise NMS 0
Nortel Networks Business Communications Manager 3.0
Nortel Networks Business Communications Manager 2.0
Nortel Networks BCM 400
Nortel Networks BCM 200
Nortel Networks BCM 1000
ISC BIND 8.4.7
ISC BIND 8.4.6
ISC BIND 8.4.5
ISC BIND 8.4.4
ISC BIND 8.4.3
ISC BIND 8.4.2
ISC BIND 8.4.1
ISC BIND 8.4
ISC BIND 8.3.7
ISC BIND 8.3.6
ISC BIND 8.3.5
ISC BIND 8.3.4
+ Apple Mac OS X 10.2.4
+ Apple Mac OS X 10.2.3
+ Apple Mac OS X Server 10.2.4
+ Apple Mac OS X Server 10.2.3
+ S.u.S.E. Linux Personal 8.2
ISC BIND 8.3.3
+ Apple Mac OS X 10.2.2
+ Apple Mac OS X 10.2.1
+ Apple Mac OS X 10.2
+ Apple Mac OS X 10.1.5
+ Apple Mac OS X 10.1.4
+ Apple Mac OS X 10.1.3
+ Apple Mac OS X 10.1.2
+ Apple Mac OS X 10.1.1
+ Apple Mac OS X 10.1
+ Apple Mac OS X 10.1
+ Apple Mac OS X Server 10.2.2
+ Apple Mac OS X Server 10.2.1
+ Apple Mac OS X Server 10.2
+ Apple Mac OS X Server 10.0
+ Debian Linux 3.0
+ FreeBSD FreeBSD 4.7 -RELEASE
+ FreeBSD FreeBSD 4.7
+ MandrakeSoft Single Network Firewall 7.2
+ Mandriva Linux Mandrake 7.2
+ OpenPKG OpenPKG 1.1
+ OpenPKG OpenPKG Current
ISC BIND 8.3.2
+ FreeBSD FreeBSD 4.6 -RELEASE
+ FreeBSD FreeBSD 4.6
ISC BIND 8.3.1
ISC BIND 8.3 .0
ISC BIND 8.2.7
ISC BIND 8.2.6
+ OpenPKG OpenPKG 1.0
+ Trustix Secure Linux 1.5
+ Trustix Secure Linux 1.2
ISC BIND 8.2.5
+ OpenPKG OpenPKG 1.0
+ Trustix Secure Linux 1.5
ISC BIND 8.2.4
+ SuSE Linux 8.1
+ SuSE Linux 8.0
+ SuSE Linux 7.3 sparc
+ SuSE Linux 7.3 ppc
+ SuSE Linux 7.3
+ Trustix Secure Linux 1.2
ISC BIND 8.2.3 Beta
ISC BIND 8.2.3
+ Caldera OpenLinux Server 3.1.1
+ Caldera OpenLinux Server 3.1
+ Caldera OpenLinux Workstation 3.1.1
+ Caldera OpenLinux Workstation 3.1
+ Debian Linux 2.2
+ EnGarde Secure Linux 1.0.1
+ Immunix Immunix OS 7+
ISC BIND 8.2.2 p7
ISC BIND 8.2.2 p6
ISC BIND 8.2.2 p5
+ Caldera OpenLinux Desktop 2.3
+ Caldera UnixWare 7.1.1
+ Debian Linux 2.3 sparc
+ Debian Linux 2.3 powerpc
+ Debian Linux 2.3 arm
+ Debian Linux 2.3 alpha
+ Debian Linux 2.3 68k
+ Debian Linux 2.3
+ Debian Linux 2.2 sparc
+ Debian Linux 2.2 powerpc
+ Debian Linux 2.2 arm
+ Debian Linux 2.2 alpha
+ Debian Linux 2.2 68k
+ Debian Linux 2.2
+ IBM AIX 4.3.3
+ IBM AIX 4.3.2
+ IBM AIX 4.3.1
+ IBM AIX 4.3
+ MandrakeSoft Corporate Server 1.0.1
+ MandrakeSoft Single Network Firewall 7.2
+ Mandriva Linux Mandrake 7.2
+ Mandriva Linux Mandrake 7.1
+ Mandriva Linux Mandrake 7.0
+ Mandriva Linux Mandrake 6.1
+ Mandriva Linux Mandrake 6.0
+ Redhat Linux 7.0 J sparc
+ Redhat Linux 7.0 J i386
+ Redhat Linux 7.0 J alpha
+ Redhat Linux 7.0 sparc
+ Redhat Linux 7.0 i386
+ Redhat Linux 7.0 alpha
+ Redhat Linux 6.2 E sparc
+ Redhat Linux 6.2 E i386
+ Redhat Linux 6.2 E alpha
+ Redhat Linux 6.2 sparc
+ Redhat Linux 6.2 i386
+ Redhat Linux 6.2 alpha
+ Redhat Linux 6.1 sparc
+ Redhat Linux 6.1 i386
+ Redhat Linux 6.1 alpha
+ Redhat Linux 6.0 sparc
+ Redhat Linux 6.0 alpha
+ Redhat Linux 6.0
+ Redhat Linux 5.2 sparc
+ Redhat Linux 5.2 i386
+ Redhat Linux 5.2 alpha
+ SCO eDesktop 2.4
+ SCO eServer 2.3
+ SuSE Linux 6.4 ppc
+ SuSE Linux 6.4 alpha
+ SuSE Linux 6.4
+ SuSE Linux 6.3 alpha
+ SuSE Linux 6.3
+ SuSE Linux 6.2
+ SuSE Linux 6.1 alpha
+ SuSE Linux 6.1
+ SuSE Linux 6.0
+ Trustix Trustix Secure Linux 1.1
+ Trustix Trustix Secure Linux 1.0
ISC BIND 8.2.2 p4
ISC BIND 8.2.2 p3
ISC BIND 8.2.2 p2
ISC BIND 8.2.2 p1
ISC BIND 8.2.2
ISC BIND 8.2.1
ISC BIND 8.2
- Caldera OpenLinux 2.2
- Caldera OpenLinux 1.3
- Caldera UnixWare 7.1.1
- IBM AIX 4.3.3
- IBM AIX 4.3.2
- IBM AIX 4.3.1
- IBM AIX 4.3
- Redhat Linux 6.1 i386
- Redhat Linux 6.0
- Redhat Linux 5.2 i386
- Redhat Linux 5.1
- Redhat Linux 5.0
- Redhat Linux 4.2
- Redhat Linux 4.1
- Redhat Linux 4.0
- Slackware Linux 4.0
IBM AIX 5.3
IBM AIX 5.2
HP HP-UX B.11.11
Avaya Proactive Contact 0
Avaya Predictive Dialer (PDS) APC 3.0
Avaya Predictive Dialer 0
Avaya Interactive Response 1.3
Avaya Interactive Response 1.2.1
Avaya Interactive Response 3.0
Avaya Interactive Response 2.0
Avaya Interactive Response
Avaya CMS Supervisor 0
Avaya CMS Server 13.0
Avaya CMS Server 12.0
Avaya CMS Server 11.0
Avaya CMS Server 10.0
Avaya CMS Server 9.0
Avaya CMS Server 8.0
Avaya CMS Server 14.0
Avaya CMS Server 13.1
Not Vulnerable: Nortel Networks SRG200/400 1.5
Nortel Networks Business Communications Manager 4.0
ISC BIND 8.4.7 -P1


 

Privacy Statement
Copyright 2010, SecurityFocus