CVE-2009-4022

Executive Summary

Informations
Name	CVE-2009-4022	First vendor Publication	2009-11-25
Vendor	Cve	Last vendor Modification	2011-10-27

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:H/Au:N/C:N/I:P/A:N)
Cvss Base Score	2.6	Attack Range	Network
Cvss Impact Score	2.9	Attack Complexity	High
Cvss Expoit Score	4.9	Authentification	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Unspecified vulnerability in ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P4, 9.5 before 9.5.2-P1, 9.6 before 9.6.1-P2, and 9.7 beta before 9.7.0b3, with DNSSEC validation enabled and checking disabled (CD), allows remote attackers to conduct DNS cache poisoning attacks by receiving a recursive client query and sending a response that contains an Additional section with crafted data, which is not properly handled when the response is processed "at the same time as requesting DNSSEC records (DO)," aka Bug 20438.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4022

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:7459

Oval ID:	oval:org.mitre.oval:def:7459
Title:	Security Vulnerability in BIND DNS Software Shipped With Solaris May Allow DNS Cache Poisoning
Description:	Unspecified vulnerability in ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P4, 9.5 before 9.5.2-P1, 9.6 before 9.6.1-P2, and 9.7 beta before 9.7.0b3, with DNSSEC validation enabled and checking disabled (CD), allows remote attackers to conduct DNS cache poisoning attacks by receiving a recursive client query and sending a response that contains an Additional section with crafted data, which is not properly handled when the response is processed "at the same time as requesting DNSSEC records (DO)," aka Bug 20438.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-4022	Version:	3
Platform(s):	Sun Solaris 9 Sun Solaris 10	Product(s):
Definition Synopsis:
Software Section Solaris 9 (SPARC) meets Sun Alert 273169 Solaris 9 (SPARC) is installed AND NOT Patch 112837-21 or later installed OR Solaris 10 (SPARC) meets Sun Alert 273169 Solaris 10 (SPARC) is installed AND NOT Patch 119783-14 or later installed OR Solaris 9 (x86) meets Sun Alert 273169 Solaris 9 (x86) is installed AND NOT Patch 114265-20 or later installed OR Solaris 10 (x86) meets Sun Alert 273169 Solaris 10 (x86) is installed AND NOT Patch 119784-14 or later installed AND in.named running

Definition Id: oval:org.mitre.oval:def:7261

Oval ID:	oval:org.mitre.oval:def:7261
Title:	HP-UX Running BIND, Remote Denial of Service (DoS), Unauthorized Disclosure of Information
Description:	Unspecified vulnerability in ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P4, 9.5 before 9.5.2-P1, 9.6 before 9.6.1-P2, and 9.7 beta before 9.7.0b3, with DNSSEC validation enabled and checking disabled (CD), allows remote attackers to conduct DNS cache poisoning attacks by receiving a recursive client query and sending a response that contains an Additional section with crafted data, which is not properly handled when the response is processed "at the same time as requesting DNSSEC records (DO)," aka Bug 20438.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-4022	Version:	3
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02546 HP Release B.11.23 AND filesets tests BindUpgrade.BIND-UPGRADE version is less than C.9.3.2.7.0 AND BindUpgrade.BIND2-UPGRADE version is less than C.9.3.2.7.0 OR Criteria meets HP Security Bulletin HPSBUX02546 HP Release B.11.23 AND filesets tests InternetSrvcs.INETSVCS-INETD is installed AND InternetSrvcs.INETSVCS-RUN is installed AND InternetSrvcs.INETSVCS2-RUN is installed AND NOT Patch PHNE_40339 is installed OR Criteria meets HP Security Bulletin HPSBUX02546 HP Release B.11.11 AND BindUpgrade.BIND-UPGRADE version is less than C.9.3.2.7.0 OR Criteria meets HP Security Bulletin HPSBUX02546 HP Release B.11.11 AND BINDv920.INETSVCS-BIND version is less than B.11.11.01.015

Definition Id: oval:org.mitre.oval:def:11745

Oval ID:	oval:org.mitre.oval:def:11745
Title:	Vulnerability with DNSSEC validation enabled in BIND.
Description:	Unspecified vulnerability in ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P4, 9.5 before 9.5.2-P1, 9.6 before 9.6.1-P2, and 9.7 beta before 9.7.0b3, with DNSSEC validation enabled and checking disabled (CD), allows remote attackers to conduct DNS cache poisoning attacks by receiving a recursive client query and sending a response that contains an Additional section with crafted data, which is not properly handled when the response is processed "at the same time as requesting DNSSEC records (DO)," aka Bug 20438.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-4022	Version:	3
Platform(s):	IBM AIX 6.1	Product(s):
Definition Synopsis:
IBM AIX 6100-02 meets CVE-2009-4022 IBM AIX 6100-02 is installed AND NOT All filesets for APAR IZ71774 are installed AND Fileset Check. Fileset bos.net.tcp.client check. Fileset bos.net.tcp.client is greater than or equal 6.1.2.0 AND Fileset bos.net.tcp.client is less than or equal 6.1.2.6 OR Fileset bos.net.tcp.server check. Fileset bos.net.tcp.server is greater than or equal 6.1.2.0 AND Fileset bos.net.tcp.server is less than or equal 6.1.2.4 OR IBM AIX 6100-03 meets CVE-2009-4022 IBM AIX 6100-03 is installed AND NOT All filesets for APAR IZ71667 are installed AND Fileset Check. Fileset bos.net.tcp.server check. Fileset bos.net.tcp.server is greater than or equal 6.1.3.0 AND Fileset bos.net.tcp.server is less than or equal 6.1.3.2 OR Fileset bos.net.tcp.client check. Fileset bos.net.tcp.client is greater than or equal 6.1.3.0 AND Fileset bos.net.tcp.client is less than or equal 6.1.3.3 OR IBM AIX 6100-04 meets CVE-2009-4022 IBM AIX 6100-04 is installed AND NOT All filesets for APAR IZ68597 are installed AND Fileset Check Fileset bos.net.tcp.client check. Fileset bos.net.tcp.client is greater than or equal 6.1.4.0 AND Fileset bos.net.tcp.client is less than or equal 6.1.4.2 OR Fileset bos.net.tcp.server check. Fileset bos.net.tcp.server is greater than or equal 6.1.4.0 AND Fileset bos.net.tcp.server is less than or equal 6.1.4.1

Definition Id: oval:org.mitre.oval:def:10821

Oval ID:	oval:org.mitre.oval:def:10821
Title:	Unspecified vulnerability in ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P4, 9.5 before 9.5.2-P1, 9.6 before 9.6.1-P2, and 9.7 beta before 9.7.0b3, with DNSSEC validation enabled and checking disabled (CD), allows remote attackers to conduct DNS cache poisoning attacks by receiving a recursive client query and sending a response that contains an Additional section with crafted data, which is not properly handled when the response is processed "at the same time as requesting DNSSEC records (DO)," aka Bug 20438.
Description:	Unspecified vulnerability in ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P4, 9.5 before 9.5.2-P1, 9.6 before 9.6.1-P2, and 9.7 beta before 9.7.0b3, with DNSSEC validation enabled and checking disabled (CD), allows remote attackers to conduct DNS cache poisoning attacks by receiving a recursive client query and sending a response that contains an Additional section with crafted data, which is not properly handled when the response is processed "at the same time as requesting DNSSEC records (DO)," aka Bug 20438.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-4022	Version:	5
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section bind-utils is earlier than 30:9.3.6-4.P1.el5_4.1 AND bind-libbind-devel is earlier than 30:9.3.6-4.P1.el5_4.1 AND bind-devel is earlier than 30:9.3.6-4.P1.el5_4.1 AND bind-chroot is earlier than 30:9.3.6-4.P1.el5_4.1 AND caching-nameserver is earlier than 30:9.3.6-4.P1.el5_4.1 AND bind-sdb is earlier than 30:9.3.6-4.P1.el5_4.1 AND bind is earlier than 30:9.3.6-4.P1.el5_4.1 AND bind-libs is earlier than 30:9.3.6-4.P1.el5_4.1

CPE : Common Platform Enumeration

Type	Description	Count
Application	Isc Bind cpe:/a:isc:bind:9.6.1:p1 cpe:/a:isc:bind:9.6.1 cpe:/a:isc:bind:9.6.0b1 cpe:/a:isc:bind:9.6.0a1 cpe:/a:isc:bind:9.6.0 cpe:/a:isc:bind:9.6.0:p1 cpe:/a:isc:bind:9.6.0:rc1 cpe:/a:isc:bind:9.6.0:rc2 cpe:/a:isc:bind:9.5.1b3 cpe:/a:isc:bind:9.5.1b2 cpe:/a:isc:bind:9.5.1b1 cpe:/a:isc:bind:9.5.1:rc1 cpe:/a:isc:bind:9.5.1:rc2 cpe:/a:isc:bind:9.5.1 cpe:/a:isc:bind:9.5.0b3 cpe:/a:isc:bind:9.5.0b2 cpe:/a:isc:bind:9.5.0b1 cpe:/a:isc:bind:9.5.0a7 cpe:/a:isc:bind:9.5.0a6 cpe:/a:isc:bind:9.5.0a5 cpe:/a:isc:bind:9.5.0a4 cpe:/a:isc:bind:9.5.0a3 cpe:/a:isc:bind:9.5.0a2 cpe:/a:isc:bind:9.5.0a1 cpe:/a:isc:bind:9.5.0-p2-w2 cpe:/a:isc:bind:9.5.0-p2-w1 cpe:/a:isc:bind:9.5.0-p2 cpe:/a:isc:bind:9.5.0-p1 cpe:/a:isc:bind:9.5.0:rc1 cpe:/a:isc:bind:9.5.0 cpe:/a:isc:bind:9.5 cpe:/a:isc:bind:9.4.3b3 cpe:/a:isc:bind:9.4.3b2 cpe:/a:isc:bind:9.4.3b1 cpe:/a:isc:bind:9.4.3:p2 cpe:/a:isc:bind:9.4.3 cpe:/a:isc:bind:9.4.3:rc1 cpe:/a:isc:bind:9.4.2 cpe:/a:isc:bind:9.4.1 cpe:/a:isc:bind:9.4.0b4 cpe:/a:isc:bind:9.4.0b3 cpe:/a:isc:bind:9.4.0b2 cpe:/a:isc:bind:9.4.0b1 cpe:/a:isc:bind:9.4.0a6 cpe:/a:isc:bind:9.4.0a5 cpe:/a:isc:bind:9.4.0a4 cpe:/a:isc:bind:9.4.0a3 cpe:/a:isc:bind:9.4.0a2 cpe:/a:isc:bind:9.4.0a1 cpe:/a:isc:bind:9.4.0 cpe:/a:isc:bind:9.4.0:rc1 cpe:/a:isc:bind:9.3.6p1 cpe:/a:isc:bind:9.3.6b1 cpe:/a:isc:bind:9.3.6:rc1 cpe:/a:isc:bind:9.3.6 cpe:/a:isc:bind:9.3.5b1 cpe:/a:isc:bind:9.3.5-p2-w2 cpe:/a:isc:bind:9.3.5-p2-w1 cpe:/a:isc:bind:9.3.5-p2 cpe:/a:isc:bind:9.3.5 cpe:/a:isc:bind:9.3.5:rc1 cpe:/a:isc:bind:9.3.5:rc2 cpe:/a:isc:bind:9.3.4p1 cpe:/a:isc:bind:9.3.4 cpe:/a:isc:bind:9.3.3b1 cpe:/a:isc:bind:9.3.3:rc2 cpe:/a:isc:bind:9.3.3 cpe:/a:isc:bind:9.3.3:rc1 cpe:/a:isc:bind:9.3.3:rc3 cpe:/a:isc:bind:9.3.2p2 cpe:/a:isc:bind:9.3.2p1 cpe:/a:isc:bind:9.3.2b2 cpe:/a:isc:bind:9.3.2b1 cpe:/a:isc:bind:9.3.2 cpe:/a:isc:bind:9.3.2:rc1 cpe:/a:isc:bind:9.3.1:beta2 cpe:/a:isc:bind:9.3.1:rc1 cpe:/a:isc:bind:9.3.1 cpe:/a:isc:bind:9.3.0:rc3 cpe:/a:isc:bind:9.3.0 cpe:/a:isc:bind:9.3.0:rc2 cpe:/a:isc:bind:9.3.0:beta4 cpe:/a:isc:bind:9.3.0:beta3 cpe:/a:isc:bind:9.3.0:beta2 cpe:/a:isc:bind:9.3.0:rc4 cpe:/a:isc:bind:9.3.0:rc1 cpe:/a:isc:bind:9.3 cpe:/a:isc:bind:9.2.9b1 cpe:/a:isc:bind:9.2.9 cpe:/a:isc:bind:9.2.9:rc1 cpe:/a:isc:bind:9.2.8p1 cpe:/a:isc:bind:9.2.8 cpe:/a:isc:bind:9.2.7b1 cpe:/a:isc:bind:9.2.7 cpe:/a:isc:bind:9.2.7:rc1 cpe:/a:isc:bind:9.2.7:rc3 cpe:/a:isc:bind:9.2.7:rc2 cpe:/a:isc:bind:9.2.6p2 cpe:/a:isc:bind:9.2.6p1 cpe:/a:isc:bind:9.2.6b2 cpe:/a:isc:bind:9.2.6b1 cpe:/a:isc:bind:9.2.6:rc1 cpe:/a:isc:bind:9.2.6 cpe:/a:isc:bind:9.2.5:rc1 cpe:/a:isc:bind:9.2.5 cpe:/a:isc:bind:9.2.5:beta2 cpe:/a:isc:bind:9.2.4:rc3 cpe:/a:isc:bind:9.2.4:rc8 cpe:/a:isc:bind:9.2.4:rc6 cpe:/a:isc:bind:9.2.4:rc2 cpe:/a:isc:bind:9.2.4:rc7 cpe:/a:isc:bind:9.2.4 cpe:/a:isc:bind:9.2.4:rc5 cpe:/a:isc:bind:9.2.4:rc4 cpe:/a:isc:bind:9.2.3 cpe:/a:isc:bind:9.2.3:rc1 cpe:/a:isc:bind:9.2.3:rc3 cpe:/a:isc:bind:9.2.3:rc4 cpe:/a:isc:bind:9.2.3:rc2 cpe:/a:isc:bind:9.2.2:p3 cpe:/a:isc:bind:9.2.2:rc1 cpe:/a:isc:bind:9.2.2:p2 cpe:/a:isc:bind:9.2.2 cpe:/a:isc:bind:9.2.1:rc1 cpe:/a:isc:bind:9.2.1 cpe:/a:isc:bind:9.2.1:rc2 cpe:/a:isc:bind:9.2.0b2 cpe:/a:isc:bind:9.2.0b1 cpe:/a:isc:bind:9.2.0a3 cpe:/a:isc:bind:9.2.0a2 cpe:/a:isc:bind:9.2.0a1 cpe:/a:isc:bind:9.2.0 cpe:/a:isc:bind:9.2.0:rc7 cpe:/a:isc:bind:9.2.0:rc1 cpe:/a:isc:bind:9.2.0:rc2 cpe:/a:isc:bind:9.2.0:rc10 cpe:/a:isc:bind:9.2.0:rc5 cpe:/a:isc:bind:9.2.0:rc9 cpe:/a:isc:bind:9.2.0:rc3 cpe:/a:isc:bind:9.2.0:rc4 cpe:/a:isc:bind:9.2.0:rc8 cpe:/a:isc:bind:9.2.0:rc6 cpe:/a:isc:bind:9.2 cpe:/a:isc:bind:9.1.3p3 cpe:/a:isc:bind:9.1.3p2 cpe:/a:isc:bind:9.1.3:rc2 cpe:/a:isc:bind:9.1.3 cpe:/a:isc:bind:9.1.3:rc1 cpe:/a:isc:bind:9.1.3:rc3 cpe:/a:isc:bind:9.1.2 cpe:/a:isc:bind:9.1.2:rc1 cpe:/a:isc:bind:9.1.1:rc4 cpe:/a:isc:bind:9.1.1:rc7 cpe:/a:isc:bind:9.1.1:rc6 cpe:/a:isc:bind:9.1.1:rc2 cpe:/a:isc:bind:9.1.1:rc3 cpe:/a:isc:bind:9.1.1 cpe:/a:isc:bind:9.1.1:rc5 cpe:/a:isc:bind:9.1.1:rc1 cpe:/a:isc:bind:9.1.0b3 cpe:/a:isc:bind:9.1.0b2 cpe:/a:isc:bind:9.1.0b1 cpe:/a:isc:bind:9.1.0:rc1 cpe:/a:isc:bind:9.1 cpe:/a:isc:bind:9.0.1 cpe:/a:isc:bind:9.0.1:rc2 cpe:/a:isc:bind:9.0.1:rc1 cpe:/a:isc:bind:9.0.0b5 cpe:/a:isc:bind:9.0.0b4 cpe:/a:isc:bind:9.0.0b3 cpe:/a:isc:bind:9.0.0b2 cpe:/a:isc:bind:9.0.0b1 cpe:/a:isc:bind:9.0.0:rc3 cpe:/a:isc:bind:9.0.0:rc6 cpe:/a:isc:bind:9.0.0:rc2 cpe:/a:isc:bind:9.0.0:rc1 cpe:/a:isc:bind:9.0.0:rc5 cpe:/a:isc:bind:9.0.0:rc4	178

Open Source Vulnerability Database (OSVDB)

id	Description
60493	ISC BIND DNSSEC Recursive Query Additional Section Cache Poisoning

Internal Sources (Detail)

Source	Url
AIXAPAR	http://www.ibm.com/support/docview.wss?uid=isg1IZ68597 http://www.ibm.com/support/docview.wss?uid=isg1IZ71667 http://www.ibm.com/support/docview.wss?uid=isg1IZ71774
APPLE	http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html
BID	http://www.securityfocus.com/bid/37118
CERT-VN	http://www.kb.cert.org/vuls/id/418861
CONFIRM	ftp://ftp.sco.com/pub/unixware7/714/security/p535243_uw7/p535243b.txt http://aix.software.ibm.com/aix/efixes/security/bind9_advisory.asc http://support.apple.com/kb/HT5002 http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0018 https://bugzilla.redhat.com/show_bug.cgi?id=538744 https://issues.rpath.com/browse/RPL-3152 https://www.isc.org/advisories/CVE-2009-4022v6 https://www.isc.org/advisories/CVE2009-4022
FEDORA	https://www.redhat.com/archives/fedora-package-announce/2009-November/msg0117... https://www.redhat.com/archives/fedora-package-announce/2009-November/msg0118...
MANDRIVA	http://www.mandriva.com/security/advisories?name=MDVSA-2009:304
MLIST	http://lists.vmware.com/pipermail/security-announce/2010/000082.html http://www.openwall.com/lists/oss-security/2009/11/24/1 http://www.openwall.com/lists/oss-security/2009/11/24/2 http://www.openwall.com/lists/oss-security/2009/11/24/8
OSVDB	http://osvdb.org/60493
REDHAT	http://www.redhat.com/support/errata/RHSA-2009-1620.html
SECUNIA	http://secunia.com/advisories/37426 http://secunia.com/advisories/37491 http://secunia.com/advisories/38219 http://secunia.com/advisories/38240 http://secunia.com/advisories/38794 http://secunia.com/advisories/38834 http://secunia.com/advisories/39334 http://secunia.com/advisories/40730
SUNALERT	http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021660.1-1 http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021798.1-1
UBUNTU	http://www.ubuntu.com/usn/USN-888-1
VUPEN	http://www.vupen.com/english/advisories/2009/3335 http://www.vupen.com/english/advisories/2010/0176 http://www.vupen.com/english/advisories/2010/0528 http://www.vupen.com/english/advisories/2010/0622
XF	http://xforce.iss.net/xforce/xfdb/54416

Alert History

If you want to see full details history, please login or register.

Date	Informations
2013-05-11 00:01:16	Multiple Updates

Type	Count
Oval ID(s)	4
CPE ID(s)	178
osvdb(s)	1

Related	Severity
VMSA-2010-0004	(Critical)
HPSBUX02546 SSR...	(High)
GLSA-201006-11	(High)
CVE-2010-0382	(High)
MDVSA-2009:304	(High)
USN-888-1	(Medium)
SUN-275890	(Medium)
RHSA-2010:0062	(Medium)
MDVSA-2010:021	(Medium)
CVE-2010-0290	(Medium)
VU#418861	(Low)
USN-865-1	(Low)
SUN-273169	(Low)
RHSA-2009:1620	(Low)
MDVSA-2009:313-1	(Low)
DSA-1961	(Low)