CVEvulnerability
CVE-2013-6230
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-11-08
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
The Winsock WSAIoctl API in Microsoft Windows Server 2008, as used in ISC BIND 9.6-ESV before 9.6-ESV-R10-P1, 9.8 before 9.8.6-P1, 9.9 before 9.9.4-P1, 9.9.3-S1, 9.9.4-S1, and other products, does not properly support the SIO_GET_INTERFACE_LIST command for netmask 255.255.255.255, which allows remote attackers to bypass intended IP address restrictions by leveraging misinterpretation of this netmask as a 0.0.0.0 netmask.
Affected configurations
• isc bind 9.6
• isc bind 9.8.0
• isc bind 9.8.1
• isc bind 9.8.2
• isc bind 9.8.3
• isc bind 9.8.4
• isc bind 9.8.5
• isc bind 9.8.6
• isc bind 9.9.0
• isc bind 9.9.1
• isc bind 9.9.2
• isc bind 9.9.3
• isc bind 9.9.4
Related
Weakness · not in database (1)
References
- http://www.slackware.com/security/viewer.php?l=slackware-security&y=2014&m=slackware-security.518391 www.slackware.com
- https://kb.isc.org/article/AA-01062 Vendor Advisory
- https://kb.isc.org/article/AA-01063 Vendor Advisory
- http://www.slackware.com/security/viewer.php?l=slackware-security&y=2014&m=slackware-security.518391 www.slackware.com
- https://kb.isc.org/article/AA-01062 Vendor Advisory
- https://kb.isc.org/article/AA-01063 Vendor Advisory