CVEvulnerability

CVE-2003-0914

4.3 MEDIUM Published 2003-12-15 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2003-12-15
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N

Description

ISC BIND 8.3.x before 8.3.7, and 8.4.x before 8.4.3, allows remote attackers to poison the cache via a malicious name server that returns negative responses with a large TTL (time-to-live) value.

Affected configurations

• isc bind 8.2.3 • isc bind 8.2.4 • isc bind 8.2.5 • isc bind 8.2.6 • isc bind 8.2.7 • isc bind 8.3.0 • isc bind 8.3.1 • isc bind 8.3.2 • isc bind 8.3.3 • isc bind 8.3.4 • isc bind 8.3.5 • isc bind 8.3.6 • isc bind 8.4 • isc bind 8.4.1 • nixu namesurfer standard 3.0.1 • nixu namesurfer suite 3.0.1 • compaq tru64 4.0f • compaq tru64 4.0f pk6 bl17 • compaq tru64 4.0f pk7 bl18 • compaq tru64 4.0f pk8 bl22 • compaq tru64 4.0g • compaq tru64 4.0g pk3 bl17 • compaq tru64 4.0g pk4 bl22 • compaq tru64 5.1 • compaq tru64 5.1 pk3 bl17 • compaq tru64 5.1 pk4 bl18 • compaq tru64 5.1 pk5 bl19 • compaq tru64 5.1 pk6 bl20 • compaq tru64 5.1a • compaq tru64 5.1a pk1 bl1 • compaq tru64 5.1a pk2 bl2 • compaq tru64 5.1a pk3 bl3 • compaq tru64 5.1a pk4 bl21 • compaq tru64 5.1a pk5 bl23 • compaq tru64 5.1b • compaq tru64 5.1b pk1 bl1 • compaq tru64 5.1b pk2 bl22 • freebsd freebsd 4.4 • freebsd freebsd 4.5 • freebsd freebsd 4.6 • freebsd freebsd 4.6.2 • freebsd freebsd 4.7 • freebsd freebsd 4.8 • freebsd freebsd 4.9 • freebsd freebsd 5.0 • hp hp-ux 11.00 • hp hp-ux 11.11 • ibm aix 5.1l • netbsd netbsd 1.6 • netbsd netbsd 1.6.1 • netbsd netbsd current • sco unixware 7.1.1 • sun solaris 7.0 • sun solaris 8.0 • sun solaris 9.0 • sun sunos 5.7 • sun sunos 5.8

References