Signature Detail
Short Name |
DNS:EXPLOIT:BIND-MULT-RRSET |
|---|---|
Severity |
Medium |
Recommended |
No |
Recommended Action |
Drop |
Category |
DNS |
Keywords |
ISC BIND DNSSEC Validation Multiple RRsets Denial of Service |
Release Date |
2010/09/30 |
Update Number |
1783 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
DNS: ISC BIND DNSSEC Validation Multiple RRsets Denial of Service
This signature detects attempts to exploit a known vulnerability against ISC BIND. A successful attack can lead to a denial-of-service condition.
Extended Description
ISC BIND is prone to a remote denial-of-service vulnerability because the application fails to properly handle malformed DNSSEC validation requests. Successfully exploiting this issue allows remote attackers to crash affected DNS servers, denying further service to legitimate users.
Affected Products
- Apple Mac OS X 10.3.0
- Apple Mac OS X 10.3.1
- Apple Mac OS X 10.3.2
- Apple Mac OS X 10.3.3
- Apple Mac OS X 10.3.4
- Apple Mac OS X 10.3.5
- Apple Mac OS X 10.3.6
- Apple Mac OS X 10.3.7
- Apple Mac OS X 10.3.8
- Apple Mac OS X 10.3.9
- Apple Mac OS X 10.4.0
- Apple Mac OS X 10.4.1
- Apple Mac OS X 10.4.2
- Apple Mac OS X 10.4.3
- Apple Mac OS X 10.4.4
- Apple Mac OS X 10.4.5
- Apple Mac OS X 10.4.6
- Apple Mac OS X 10.4.7
- Apple Mac OS X 10.4.8
- Apple Mac OS X 10.4.9
- Apple Mac OS X Server 10.3.0
- Apple Mac OS X Server 10.3.1
- Apple Mac OS X Server 10.3.2
- Apple Mac OS X Server 10.3.3
- Apple Mac OS X Server 10.3.4
- Apple Mac OS X Server 10.3.5
- Apple Mac OS X Server 10.3.6
- Apple Mac OS X Server 10.3.7
- Apple Mac OS X Server 10.3.8
- Apple Mac OS X Server 10.3.9
- Apple Mac OS X Server 10.4.0
- Apple Mac OS X Server 10.4.1
- Apple Mac OS X Server 10.4.2
- Apple Mac OS X Server 10.4.3
- Apple Mac OS X Server 10.4.4
- Apple Mac OS X Server 10.4.5
- Apple Mac OS X Server 10.4.6
- Apple Mac OS X Server 10.4.7
- Apple Mac OS X Server 10.4.8
- Apple Mac OS X Server 10.4.9
- Avaya Interactive Response 2.0
- Avaya Intuity LX
- Avaya Message Networking
- Avaya Messaging Storage Server 1.0
- Avaya Messaging Storage Server 2.0
- Avaya Messaging Storage Server MM3.0
- Avaya Messaging Storage Server
- Debian Linux 3.1.0
- Debian Linux 3.1.0 Alpha
- Debian Linux 3.1.0 Amd64
- Debian Linux 3.1.0 Arm
- Debian Linux 3.1.0 Hppa
- Debian Linux 3.1.0 Ia-32
- Debian Linux 3.1.0 Ia-64
- Debian Linux 3.1.0 M68k
- Debian Linux 3.1.0 Mips
- Debian Linux 3.1.0 Mipsel
- Debian Linux 3.1.0 Ppc
- Debian Linux 3.1.0 S/390
- Debian Linux 3.1.0 Sparc
- FreeBSD 5.3.0
- FreeBSD 5.3.0 -RELEASE
- FreeBSD 5.3.0 -RELENG
- FreeBSD 5.3.0 -STABLE
- FreeBSD 5.4.0 -PRERELEASE
- FreeBSD 5.4.0 -RELEASE
- FreeBSD 5.4.0 -RELENG
- FreeBSD 5.4-STABLE
- FreeBSD 5.5.0 -RELEASE
- FreeBSD 5.5.0 -STABLE
- FreeBSD 6.0.0 -RELEASE
- FreeBSD 6.0.0 -STABLE
- FreeBSD 6.0.0 .X
- FreeBSD 6.0 -RELEASE-P5
- FreeBSD 6.1 -RELEASE
- FreeBSD 6.1 -RELEASE-P10
- FreeBSD 6.1 -STABLE
- FreeBSD 6.2
- FreeBSD 6.2 -STABLE
- Gentoo Linux
- HP HP-UX B.11.11
- HP HP-UX B.11.23
- HP Internet Express IX BIND 6.6
- HP Tru64 4.0.0 F PK8
- HP Tru64 4.0.0 G PK4
- HP Tru64 5.1.0 A PK6
- HP Tru64 5.1.0 B-3
- HP Tru64 5.1.0 B-4
- IBM AIX 5.2
- IBM AIX 5.3
- ISC BIND 9.0.0
- ISC BIND 9.0.1
- ISC BIND 9.1.0
- ISC BIND 9.1.1
- ISC BIND 9.1.2
- ISC BIND 9.1.3
- ISC BIND 9.2.0
- ISC BIND 9.2.1
- ISC BIND 9.2.2
- ISC BIND 9.2.3
- ISC BIND 9.2.4
- ISC BIND 9.2.5
- ISC BIND 9.2.6
- ISC BIND 9.2.6-P1
- ISC BIND 9.2.6-P2
- ISC BIND 9.2.7
- ISC BIND 9.2.7B1
- ISC BIND 9.2.7Rc1
- ISC BIND 9.2.7Rc2
- ISC BIND 9.2.7Rc3
- ISC BIND 9.3.0
- ISC BIND 9.3.1
- ISC BIND 9.3.2
- ISC BIND 9.3.2-P1
- ISC BIND 9.3.2-P2
- ISC BIND 9.3.3
- ISC BIND 9.3.3 B
- ISC BIND 9.3.3B1
- ISC BIND 9.3.3 Rc1
- ISC BIND 9.3.3Rc2
- ISC BIND 9.3.3Rc3
- ISC BIND 9.4.0A1
- ISC BIND 9.4.0A2
- ISC BIND 9.4.0A3
- ISC BIND 9.4.0A4
- ISC BIND 9.4.0A5
- ISC BIND 9.4.0A6
- ISC BIND 9.4.0B1
- ISC BIND 9.4.0B2
- ISC BIND 9.4.0B3
- ISC BIND 9.4.0B4
- ISC BIND 9.4.0Rc1
- ISC BIND 9.5.0A1
- Mandriva Corporate Server 3.0.0
- Mandriva Corporate Server 3.0.0 X86 64
- Mandriva Corporate Server 4.0
- Mandriva Corporate Server 4.0.0 X86 64
- Mandriva Linux Mandrake 2006.0.0
- Mandriva Linux Mandrake 2006.0.0 X86 64
- Mandriva Linux Mandrake 2007.0
- Mandriva Linux Mandrake 2007.0 X86 64
- Mandriva Multi Network Firewall 2.0.0
- NetBSD 2.0.0
- NetBSD 2.0.1
- NetBSD 2.0.2
- NetBSD 2.0.3
- NetBSD 2.0.4
- NetBSD 2.1.0
- NetBSD 2.1.1
- NetBSD 3.0.0
- NetBSD 3.0.1
- NetBSD 3.0.2
- NetBSD 3.1
- NetBSD 3,1_RC1
- NetBSD 3.1_RC3
- NetBSD 4.0
- NetBSD 4,0 Beta
- NetBSD 4.0 BETA2
- OpenPKG 2-Stable-20061018
- OpenPKG Current
- OpenPKG E1.0-Solid
- OpenPKG Stable
- Red Hat Advanced Workstation for the Itanium Processor 2.1.0
- Red Hat Advanced Workstation for the Itanium Processor 2.1.0 IA64
- Red Hat Desktop 3.0.0
- Red Hat Desktop 4.0.0
- Red Hat Enterprise Linux 5 Server
- Red Hat Enterprise Linux AS 2.1
- Red Hat Enterprise Linux AS 2.1 IA64
- Red Hat Enterprise Linux AS 3
- Red Hat Enterprise Linux AS 4
- Red Hat Enterprise Linux Desktop 5 Client
- Red Hat Enterprise Linux Desktop Workstation 5 Client
- Red Hat Enterprise Linux ES 2.1
- Red Hat Enterprise Linux ES 2.1 IA64
- Red Hat Enterprise Linux ES 3
- Red Hat Enterprise Linux ES 4
- Red Hat Enterprise Linux WS 2.1
- Red Hat Enterprise Linux WS 2.1 IA64
- Red Hat Enterprise Linux WS 3
- Red Hat Enterprise Linux WS 4
- Red Hat Fedora Core5
- Red Hat Fedora Core6
- rPath rPath Linux 1
- SGI ProPack 3.0.0 SP6
- Slackware Linux 10.0.0
- Slackware Linux 10.1.0
- Slackware Linux 10.2.0
- Slackware Linux 11.0
- Slackware Linux 8.1.0
- Slackware Linux 9.0.0
- Slackware Linux 9.1.0
- Sun Solaris 10 X86
- SuSE Linux Desktop 10
- SuSE Linux Personal 10.0.0 OSS
- SuSE Linux Personal 10.1
- SuSE Linux Personal 9.3.0
- SuSE Linux Personal 9.3.0 X86 64
- SuSE Linux Professional 10.0.0
- SuSE Linux Professional 10.0.0 OSS
- SuSE Linux Professional 10.1
- SuSE Linux Professional 9.3.0
- SuSE Linux Professional 9.3.0 X86 64
- SuSE Novell Linux Desktop 9.0.0
- SuSE Novell Linux POS 9
- SuSE Open-Enterprise-Server
- SuSE openSUSE 10.2
- SuSE SUSE Linux Enterprise Desktop 10
- SuSE SUSE Linux Enterprise Server 10
- SuSE SUSE Linux Enterprise Server 8
- SuSE SUSE Linux Enterprise Server 9
- SuSE SuSE Linux Openexchange Server 4.0.0
- SuSE SUSE LINUX Retail Solution 8.0.0
- SuSE SuSE Linux School Server for i386
- SuSE SuSE Linux Standard Server 8.0.0
- SuSE UnitedLinux 1.0.0
- Trustix Operating System Enterprise Server 2.0
- Trustix Secure Linux 2.2.0
- Trustix Secure Linux 3.0.0
- Turbolinux Appliance Server 1.0.0 Hosting Edition
- Turbolinux Appliance Server 1.0.0 Workgroup Edition
- Turbolinux Appliance Server 2.0
- Turbolinux Appliance Server Hosting Edition 1.0.0
- Turbolinux Appliance Server Workgroup Edition 1.0.0
- Turbolinux Home
- Turbolinux Multimedia
- Turbolinux Personal
- Turbolinux 10 F...
- Turbolinux FUJI
- Turbolinux Turbolinux Desktop 10.0.0
- Turbolinux Turbolinux Server 10.0.0
- Turbolinux Turbolinux Server 10.0.0 X64
- Turbolinux Turbolinux Server 10.0.0 X86
- Turbolinux Turbolinux Server 8.0.0
- Ubuntu Ubuntu Linux 5.10.0 Amd64
- Ubuntu Ubuntu Linux 5.10.0 I386
- Ubuntu Ubuntu Linux 5.10.0 Powerpc
- Ubuntu Ubuntu Linux 5.10.0 Sparc
- Ubuntu Ubuntu Linux 6.06 LTS Amd64
- Ubuntu Ubuntu Linux 6.06 LTS I386
- Ubuntu Ubuntu Linux 6.06 LTS Powerpc
- Ubuntu Ubuntu Linux 6.06 LTS Sparc
- Ubuntu Ubuntu Linux 6.10 Amd64
- Ubuntu Ubuntu Linux 6.10 I386
- Ubuntu Ubuntu Linux 6.10 Powerpc
- Ubuntu Ubuntu Linux 6.10 Sparc
- VMWare ESX 2.1.3
- VMWare ESX Server 2.0.2
- VMWare ESX Server 2.0.2 Patch 1
- VMWare ESX Server 2.0.2 Patch 2
- VMWare ESX Server 2.0.2 Patch 4
- VMWare ESX Server 2.0.2 Patch 5
- VMWare ESX Server 2.1.3
- VMWare ESX Server 2.1.3 Patch 1
- VMWare ESX Server 2.1.3 Patch 2
- VMWare ESX Server 2.1.3 Patch 5
- VMWare ESX Server 2.5.3
- VMWare ESX Server 2.5.3 Patch 2
- VMWare ESX Server 2.5.3 Patch 4
- VMWare ESX Server 2.5.3 Patch 5
- VMWare ESX Server 2.5.3 Patch 6
- VMWare ESX Server 2.5.3 Patch 7
- VMWare ESX Server 2.5.3 Patch 8
- VMWare ESX Server 2.5.4
- VMWare ESX Server 2.5.4 Patch 1
- VMWare ESX Server 2.5.4 Patch 3
- VMWare ESX Server 2.5.4 Patch 5
- VMWare ESX Server 3.0.0
- VMWare ESX Server 3.0.1
- VMWare ESX Server 3.0.2
References
- BugTraq: 22231
- CVE: CVE-2007-0494