CVE Database
/

CVE-2010-0097

Back to search

CVE-2010-0097

Published: Jan 22, 2010

Modified: Aug 7, 2024

PUBLISHED

Description

ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta does not properly validate DNSSEC (1) NSEC and (2) NSEC3 records, which allows remote attackers to add the Authenticated Data (AD) flag to a forged NXDOMAIN response for an existing domain.

VendorProductVersions

n/a

n/a

affected
n/a

References

ADV-2010-0176
vdb-entry
x_refsource_VUPEN
61853
vdb-entry
x_refsource_OSVDB
RHSA-2010:0062
vendor-advisory
x_refsource_REDHAT
37865
vdb-entry
x_refsource_BID
oval:org.mitre.oval:def:7212
vdb-entry
signature
x_refsource_OVAL
38240
third-party-advisory
x_refsource_SECUNIA
ADV-2010-1352
vdb-entry
x_refsource_VUPEN
oval:org.mitre.oval:def:7430
vdb-entry
signature
x_refsource_OVAL
FEDORA-2010-0868
vendor-advisory
x_refsource_FEDORA
USN-888-1
vendor-advisory
x_refsource_UBUNTU
ADV-2010-0981
vdb-entry
x_refsource_VUPEN
1021798
vendor-advisory
x_refsource_SUNALERT
oval:org.mitre.oval:def:9357
vdb-entry
signature
x_refsource_OVAL
oval:org.mitre.oval:def:12205
vdb-entry
signature
x_refsource_OVAL
SSRT100004
vendor-advisory
x_refsource_HP
APPLE-SA-2011-10-12-3
vendor-advisory
x_refsource_APPLE
39334
third-party-advisory
x_refsource_SECUNIA
40086
third-party-advisory
x_refsource_SECUNIA
ADV-2010-0622
vdb-entry
x_refsource_VUPEN
FEDORA-2010-0861
vendor-advisory
x_refsource_FEDORA
39582
third-party-advisory
x_refsource_SECUNIA
1023474
vdb-entry
x_refsource_SECTRACK
38219
third-party-advisory
x_refsource_SECUNIA
MDVSA-2010:021
vendor-advisory
x_refsource_MANDRIVA
RHSA-2010:0095
vendor-advisory
x_refsource_REDHAT
DSA-2054
vendor-advisory
x_refsource_DEBIAN
SUSE-SA:2010:008
vendor-advisory
x_refsource_SUSE
38169
third-party-advisory
x_refsource_SECUNIA
HPSBUX02519
vendor-advisory
x_refsource_HP
VU#360341
third-party-advisory
x_refsource_CERT-VN

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now