CVEvulnerability
CVE-2005-0033
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2005-05-02
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Description
Buffer overflow in the code for recursion and glue fetching in BIND 8.4.4 and 8.4.5 allows remote attackers to cause a denial of service (crash) via queries that trigger the overflow in the q_usedns array that tracks nameservers and addresses.
Affected configurations
• isc bind 8.4.4
• isc bind 8.4.5
References
- ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.1/SCOSA-2006.1.txt ftp.sco.com
- http://secunia.com/advisories/14009 secunia.com
- http://secunia.com/advisories/18291 secunia.com
- http://securitytracker.com/id?1012996 securitytracker.com
- http://www.isc.org/index.pl?/sw/bind/bind-security.php Patch
- http://www.isc.org/index.pl?/sw/bind/bind8.php Patch
- http://www.kb.cert.org/vuls/id/327633 Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/12364 www.securityfocus.com
- http://www.uniras.gov.uk/niscc/docs/al-20050125-00059.html Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19063 exchange.xforce.ibmcloud.com
- ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.1/SCOSA-2006.1.txt ftp.sco.com
- http://secunia.com/advisories/14009 secunia.com
- http://secunia.com/advisories/18291 secunia.com
- http://securitytracker.com/id?1012996 securitytracker.com
- http://www.isc.org/index.pl?/sw/bind/bind-security.php Patch
- http://www.isc.org/index.pl?/sw/bind/bind8.php Patch
- http://www.kb.cert.org/vuls/id/327633 Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/12364 www.securityfocus.com
- http://www.uniras.gov.uk/niscc/docs/al-20050125-00059.html Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19063 exchange.xforce.ibmcloud.com