CVE-2002-0400

Published Jun 18, 2002

Last updated 16 years ago

Overview

Description: ISC BIND 9 before 9.2.1 allows remote attackers to cause a denial of service (shutdown) via a malformed DNS packet that triggers an error condition that is not properly handled when the rdataset parameter to the dns_message_findtype() function in message.c is not NULL, aka DoS_findtype.
Source: cve@mitre.org
NVD status: Analyzed

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 5
Impact score: 2.9
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:N/I:N/A:P

Weaknesses

nvd@nist.gov: NVD-CWE-Other

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:isc:bind:9.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C52373DC-3E05-424B-9C78-4092A75C75A0"
          },
          {
            "criteria": "cpe:2.3:a:isc:bind:9.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1861756C-CC81-4EAB-8427-57A3C62BFF96"
          },
          {
            "criteria": "cpe:2.3:a:isc:bind:9.1.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "CDD642FC-1764-4090-A32D-830CEAE69E53"
          },
          {
            "criteria": "cpe:2.3:a:isc:bind:9.1.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "DE954FD0-56AF-4757-BAA8-B0C64703F6AF"
          },
          {
            "criteria": "cpe:2.3:a:isc:bind:9.1.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "BF891263-4ACE-47C3-83F3-C06E49F32451"
          },
          {
            "criteria": "cpe:2.3:a:isc:bind:9.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1F947835-8E96-4793-B81E-EEC103BF0CB3"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References