BIND 4 and BIND 8 allow remote attackers to access sensitive information such as environment variables.

BIND 8 suffered from several buffer overflows. It is possible to construct an inverse query that allows the stack to be read remotely exposing environment variables. CERT has disclosed information about these issues. A new upstream version fixes this. Due to the complexity of BIND we have decided to make an exception to our rule by releasing the new upstream source to our stable distribution. We recommend you upgrade your bind packages immediately.

The remote BIND server is vulnerable to various buffer overflows which may allow an attacker to gain a root shell on this host.

The remote BIND server, according to its version number, is affected by various buffer overflow vulnerabilities that may allow an attacker to execute arbitrary code on the remote host.

ID	Name	Product	Family	Severity
14863	Debian DSA-026-1 : bind - buffer overflows and information leak	Nessus	Debian Local Security Checks	critical
1005	ISC BIND < 4.9.2 Multiple Remote Vulnerabilities (deprecated)	Nessus Network Monitor	DNS Servers	critical
1004	ISC BIND < 8.2.3 Multiple Remote Vulnerabilities (deprecated)	Nessus Network Monitor	DNS Servers	critical
10605	ISC BIND < 4.9.8 / 8.2.3 Multiple Remote Overflows	Nessus	DNS	critical

Detections

Analytics

CVE-2001-0012

high

Tenable Plugins

critical

critical

critical

critical