National Cyber Awareness System

Vulnerability Summary for CVE-2010-3615

Overview

named in ISC BIND 9.7.2-P2 does not check all intended locations for allow-query ACLs, which might allow remote attackers to make successful requests for private DNS records via the standard DNS query mechanism.

Description

Per: http://www.isc.org/software/bind/advisories/cve-2010-3615 'This bug doesn't affect allow-recursion or allow-query-cache acls, since they are not relevant to a zone for which the server is authoritative. '

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

US-CERT Vulnerability Note: VU#510208

Name: VU#510208

Hyperlink:http://www.kb.cert.org/vuls/id/510208

External Source: VUPEN

Name: ADV-2010-3102

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2010/3102

External Source: BID

Name: 45134

Hyperlink:http://www.securityfocus.com/bid/45134

External Source: CONFIRM

Name: http://www.isc.org/software/bind/advisories/cve-2010-3615

Type: Advisory

Hyperlink:http://www.isc.org/software/bind/advisories/cve-2010-3615

External Source: CONFIRM

Name: http://www.isc.org/announcement/guidance-regarding-dec-1st-2010-security-advisories

Hyperlink:http://www.isc.org/announcement/guidance-regarding-dec-1st-2010-security-advisories

External Source: SLACKWARE

Name: SSA:2010-350-01

Hyperlink:http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.622190

External Source: SECTRACK

Name: 1024817

Hyperlink:http://securitytracker.com/id?1024817

External Source: SECUNIA

Name: 42671

Hyperlink:http://secunia.com/advisories/42671

External Source: SECUNIA

Name: 42458

Type: Advisory

Hyperlink:http://secunia.com/advisories/42458

External Source: OSVDB

Name: 69568

Hyperlink:http://osvdb.org/69568

External Source: FEDORA

Name: FEDORA-2010-18469

Hyperlink:http://lists.fedoraproject.org/pipermail/package-announce/2010-December/051963.html