Detections
Analytics
ISC BIND named SIG Resource Server Response RR Overflow
critical Nessus Plugin ID 11152
Synopsis
It is possible to use the remote name server to execute arbitrary code on the remote host.Description
The remote BIND server, according to its version number, is affected by the 'SIG cached RR overflow' vulnerability.An attacker may use this flaw to gain a shell on this system.
Solution
Upgrade to BIND 8.2.7, 8.3.4 or 4.9.11.Plugin Details
Severity: Critical
ID: 11152
File Name: bind_sig_cached_rr_overflow.nasl
Version: 1.30
Type: remote
Family: DNS
Published: 11/12/2002
Updated: 9/21/2023
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.5
CVSS v2
Risk Factor: Critical
Base Score: 10
Temporal Score: 7.4
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: cpe:/a:isc:bind
Required KB Items: bind/version
Exploit Ease: No known exploits are available
Vulnerability Publication Date: 11/12/2002
Reference Information
CVE: CVE-2002-1219
BID: 6160