Executive Summary



This Alert is flagged as TOP 25 Common Weakness Enumeration from CWE/SANS. For more information, you can read this.
Informations
NameCVE-2012-1667First vendor Publication2012-06-05
VendorCveLast vendor Modification2013-11-24

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:P/I:N/A:C)
Cvss Base Score8.5Attack RangeNetwork
Cvss Impact Score7.8Attack ComplexityLow
Cvss Expoit Score10AuthenticationNone Required
Calculate full CVSS 2.0 Vectors scores

Detail

ISC BIND 9.x before 9.7.6-P1, 9.8.x before 9.8.3-P1, 9.9.x before 9.9.1-P1, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P1 does not properly handle resource records with a zero-length RDATA section, which allows remote DNS servers to cause a denial of service (daemon crash or data corruption) or obtain sensitive information from process memory via a crafted record.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1667

CWE : Common Weakness Enumeration

idName
CWE-189Numeric Errors (CWE/SANS Top 25)

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:21290
 
Oval ID: oval:org.mitre.oval:def:21290
Title: RHSA-2012:0717: bind97 security update (Important)
Description: ISC BIND 9.x before 9.7.6-P1, 9.8.x before 9.8.3-P1, 9.9.x before 9.9.1-P1, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P1 does not properly handle resource records with a zero-length RDATA section, which allows remote DNS servers to cause a denial of service (daemon crash or data corruption) or obtain sensitive information from process memory via a crafted record.
Family: unix Class: patch
Reference(s): RHSA-2012:0717-00
CESA-2012:0717
CVE-2012-1033
CVE-2012-1667
Version: 29
Platform(s): Red Hat Enterprise Linux 5
CentOS Linux 5
Product(s): bind97
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:21280
 
Oval ID: oval:org.mitre.oval:def:21280
Title: RHSA-2012:0716: bind security update (Important)
Description: ISC BIND 9.x before 9.7.6-P1, 9.8.x before 9.8.3-P1, 9.9.x before 9.9.1-P1, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P1 does not properly handle resource records with a zero-length RDATA section, which allows remote DNS servers to cause a denial of service (daemon crash or data corruption) or obtain sensitive information from process memory via a crafted record.
Family: unix Class: patch
Reference(s): RHSA-2012:0716-01
CESA-2012:0716
CVE-2012-1033
CVE-2012-1667
Version: 29
Platform(s): Red Hat Enterprise Linux 5
Red Hat Enterprise Linux 6
CentOS Linux 5
CentOS Linux 6
Product(s): bind
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:20815
 
Oval ID: oval:org.mitre.oval:def:20815
Title: Vulnerability in AIX bind
Description: ISC BIND 9.x before 9.7.6-P1, 9.8.x before 9.8.3-P1, 9.9.x before 9.9.1-P1, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P1 does not properly handle resource records with a zero-length RDATA section, which allows remote DNS servers to cause a denial of service (daemon crash or data corruption) or obtain sensitive information from process memory via a crafted record.
Family: unix Class: vulnerability
Reference(s): CVE-2012-1667
Version: 4
Platform(s): IBM AIX 6.1
IBM AIX 7.1
Product(s):
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:20745
 
Oval ID: oval:org.mitre.oval:def:20745
Title: VMware security updates for vSphere API and ESX Service Console
Description: ISC BIND 9.x before 9.7.6-P1, 9.8.x before 9.8.3-P1, 9.9.x before 9.9.1-P1, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P1 does not properly handle resource records with a zero-length RDATA section, which allows remote DNS servers to cause a denial of service (daemon crash or data corruption) or obtain sensitive information from process memory via a crafted record.
Family: unix Class: vulnerability
Reference(s): CVE-2012-1667
Version: 4
Platform(s): VMWare ESX Server 4.1
Product(s):
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:19815
 
Oval ID: oval:org.mitre.oval:def:19815
Title: HP-UX Running BIND, Remote Denial of Service (DoS), Authentication Bypass
Description: ISC BIND 9.x before 9.7.6-P1, 9.8.x before 9.8.3-P1, 9.9.x before 9.9.1-P1, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P1 does not properly handle resource records with a zero-length RDATA section, which allows remote DNS servers to cause a denial of service (daemon crash or data corruption) or obtain sensitive information from process memory via a crafted record.
Family: unix Class: vulnerability
Reference(s): CVE-2012-1667
Version: 7
Platform(s): HP-UX 11
Product(s):
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:18595
 
Oval ID: oval:org.mitre.oval:def:18595
Title: DSA-2486-1 bind9 - denial of service
Description: It was discovered that BIND, a DNS server, can crash while processing resource records containing no data bytes. Both authoritative servers and resolvers are affected.
Family: unix Class: patch
Reference(s): DSA-2486-1
CVE-2012-1667
Version: 5
Platform(s): Debian GNU/Linux 6.0
Debian GNU/kFreeBSD 6.0
Product(s): bind9
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:23407
 
Oval ID: oval:org.mitre.oval:def:23407
Title: ELSA-2012:0716: bind security update (Important)
Description: ISC BIND 9.x before 9.7.6-P1, 9.8.x before 9.8.3-P1, 9.9.x before 9.9.1-P1, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P1 does not properly handle resource records with a zero-length RDATA section, which allows remote DNS servers to cause a denial of service (daemon crash or data corruption) or obtain sensitive information from process memory via a crafted record.
Family: unix Class: patch
Reference(s): ELSA-2012:0716-01
CVE-2012-1033
CVE-2012-1667
Version: 13
Platform(s): Oracle Linux 5
Oracle Linux 6
Product(s): bind
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:23354
 
Oval ID: oval:org.mitre.oval:def:23354
Title: DEPRECATED: ELSA-2012:0716: bind security update (Important)
Description: ISC BIND 9.x before 9.7.6-P1, 9.8.x before 9.8.3-P1, 9.9.x before 9.9.1-P1, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P1 does not properly handle resource records with a zero-length RDATA section, which allows remote DNS servers to cause a denial of service (daemon crash or data corruption) or obtain sensitive information from process memory via a crafted record.
Family: unix Class: patch
Reference(s): ELSA-2012:0716-01
CVE-2012-1033
CVE-2012-1667
Version: 14
Platform(s): Oracle Linux 5
Oracle Linux 6
Product(s): bind
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:23234
 
Oval ID: oval:org.mitre.oval:def:23234
Title: ELSA-2012:0717: bind97 security update (Important)
Description: ISC BIND 9.x before 9.7.6-P1, 9.8.x before 9.8.3-P1, 9.9.x before 9.9.1-P1, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P1 does not properly handle resource records with a zero-length RDATA section, which allows remote DNS servers to cause a denial of service (daemon crash or data corruption) or obtain sensitive information from process memory via a crafted record.
Family: unix Class: patch
Reference(s): ELSA-2012:0717-00
CVE-2012-1033
CVE-2012-1667
Version: 13
Platform(s): Oracle Linux 5
Product(s): bind97
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:27872
 
Oval ID: oval:org.mitre.oval:def:27872
Title: ELSA-2012-0717 -- bind97 security update (important)
Description: [32:9.7.0-10.P2.1] - fix CVE-2012-1667 and CVE-2012-1033
Family: unix Class: patch
Reference(s): ELSA-2012-0717
CVE-2012-1033
CVE-2012-1667
Version: 1
Platform(s): Oracle Linux 5
Product(s): bind97
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:27821
 
Oval ID: oval:org.mitre.oval:def:27821
Title: ELSA-2012-0716 -- bind security update (important)
Description: [32:9.7.3-8.P3.3] - fix CVE-2012-1667 and CVE-2012-1033
Family: unix Class: patch
Reference(s): ELSA-2012-0716
CVE-2012-1033
CVE-2012-1667
Version: 1
Platform(s): Oracle Linux 5
Oracle Linux 6
Product(s): bind
Definition Synopsis:

CPE : Common Platform Enumeration

TypeDescriptionCount
Application35

OpenVAS Exploits

DateDescription
2012-12-31Name : Fedora Update for bind FEDORA-2012-19822
File : nvt/gb_fedora_2012_19822_bind_fc16.nasl
2012-12-14Name : Fedora Update for bind FEDORA-2012-19830
File : nvt/gb_fedora_2012_19830_bind_fc17.nasl
2012-12-13Name : SuSE Update for bind openSUSE-SU-2012:0722-1 (bind)
File : nvt/gb_suse_2012_0722_1.nasl
2012-11-16Name : VMSA-2012-0016: VMware security updates for vSphere API and ESX Service Console
File : nvt/gb_VMSA-2012-0016.nasl
2012-10-23Name : Fedora Update for bind FEDORA-2012-15965
File : nvt/gb_fedora_2012_15965_bind_fc17.nasl
2012-10-23Name : Fedora Update for bind FEDORA-2012-15981
File : nvt/gb_fedora_2012_15981_bind_fc16.nasl
2012-10-03Name : Fedora Update for bind FEDORA-2012-14030
File : nvt/gb_fedora_2012_14030_bind_fc16.nasl
2012-09-26Name : Gentoo Security Advisory GLSA 201209-04 (bind)
File : nvt/glsa_201209_04.nasl
2012-09-25Name : Fedora Update for bind FEDORA-2012-14106
File : nvt/gb_fedora_2012_14106_bind_fc17.nasl
2012-09-10Name : Slackware Advisory SSA:2012-166-01 bind
File : nvt/esoft_slk_ssa_2012_166_01.nasl
2012-08-30Name : Fedora Update for bind FEDORA-2012-11146
File : nvt/gb_fedora_2012_11146_bind_fc17.nasl
2012-08-30Name : Fedora Update for bind FEDORA-2012-8968
File : nvt/gb_fedora_2012_8968_bind_fc17.nasl
2012-08-14Name : Fedora Update for bind FEDORA-2012-11153
File : nvt/gb_fedora_2012_11153_bind_fc16.nasl
2012-08-10Name : Debian Security Advisory DSA 2486-1 (bind9)
File : nvt/deb_2486_1.nasl
2012-08-10Name : FreeBSD Ports: bind99
File : nvt/freebsd_bind990.nasl
2012-08-10Name : FreeBSD Ports: FreeBSD
File : nvt/freebsd_FreeBSD17.nasl
2012-08-03Name : Mandriva Update for bind MDVSA-2012:089 (bind)
File : nvt/gb_mandriva_MDVSA_2012_089.nasl
2012-07-30Name : CentOS Update for bind CESA-2012:0716 centos5
File : nvt/gb_CESA-2012_0716_bind_centos5.nasl
2012-07-30Name : CentOS Update for bind CESA-2012:0716 centos6
File : nvt/gb_CESA-2012_0716_bind_centos6.nasl
2012-07-30Name : CentOS Update for bind97 CESA-2012:0717 centos5
File : nvt/gb_CESA-2012_0717_bind97_centos5.nasl
2012-06-19Name : Fedora Update for bind FEDORA-2012-8946
File : nvt/gb_fedora_2012_8946_bind_fc16.nasl
2012-06-19Name : Fedora Update for bind FEDORA-2012-8962
File : nvt/gb_fedora_2012_8962_bind_fc15.nasl
2012-06-08Name : Ubuntu Update for bind9 USN-1462-1
File : nvt/gb_ubuntu_USN_1462_1.nasl
2012-06-08Name : RedHat Update for bind RHSA-2012:0716-01
File : nvt/gb_RHSA-2012_0716-01_bind.nasl
2012-06-08Name : RedHat Update for bind97 RHSA-2012:0717-01
File : nvt/gb_RHSA-2012_0717-01_bind97.nasl

Information Assurance Vulnerability Management (IAVM)

DateDescription
2012-11-29IAVM : 2012-A-0189 - Multiple Vulnerabilities in VMware ESXi 4.1 and ESX 4.1
Severity : Category I - VMSKEY : V0035032

Snort® IPS/IDS

DateDescription
2014-11-16VMWare vSphere API SOAP request RetrieveProperties remote denial of service a...
RuleID : 31297 - Revision : 1 - Type : SERVER-WEBAPP
2014-01-10dns zone transfer with zero-length rdata attempt
RuleID : 23608 - Revision : 2 - Type : PROTOCOL-DNS

Nessus® Vulnerability Scanner

DateDescription
2014-06-13Name : The remote openSUSE host is missing a security update.
File : openSUSE-2013-296.nasl - Type : ACT_GATHER_INFO
2014-06-13Name : The remote openSUSE host is missing a security update.
File : openSUSE-2012-316.nasl - Type : ACT_GATHER_INFO
2013-09-04Name : The remote Amazon Linux AMI host is missing a security update.
File : ala_ALAS-2012-84.nasl - Type : ACT_GATHER_INFO
2013-07-12Name : The remote Oracle Linux host is missing one or more security updates.
File : oraclelinux_ELSA-2012-0716.nasl - Type : ACT_GATHER_INFO
2013-07-12Name : The remote Oracle Linux host is missing one or more security updates.
File : oraclelinux_ELSA-2012-0717.nasl - Type : ACT_GATHER_INFO
2013-07-12Name : The remote Oracle Linux host is missing one or more security updates.
File : oraclelinux_ELSA-2012-2028.nasl - Type : ACT_GATHER_INFO
2013-01-25Name : The remote SuSE 11 host is missing one or more security updates.
File : suse_11_bind-120604.nasl - Type : ACT_GATHER_INFO
2013-01-25Name : The remote SuSE 11 host is missing one or more security updates.
File : suse_11_bind-120605.nasl - Type : ACT_GATHER_INFO
2013-01-24Name : The remote AIX host is missing a security patch.
File : aix_IV22554.nasl - Type : ACT_GATHER_INFO
2013-01-24Name : The remote AIX host is missing a security patch.
File : aix_IV22555.nasl - Type : ACT_GATHER_INFO
2013-01-24Name : The remote AIX host is missing a security patch.
File : aix_IV22556.nasl - Type : ACT_GATHER_INFO
2013-01-24Name : The remote AIX host is missing a security patch.
File : aix_IV22557.nasl - Type : ACT_GATHER_INFO
2013-01-24Name : The remote AIX host is missing a security patch.
File : aix_IV22625.nasl - Type : ACT_GATHER_INFO
2012-12-07Name : The remote Slackware host is missing a security update.
File : Slackware_SSA_2012-341-01.nasl - Type : ACT_GATHER_INFO
2012-11-16Name : The remote VMware ESXi / ESX host is missing one or more security-related pat...
File : vmware_VMSA-2012-0016.nasl - Type : ACT_GATHER_INFO
2012-09-24Name : The remote Gentoo host is missing one or more security-related patches.
File : gentoo_GLSA-201209-04.nasl - Type : ACT_GATHER_INFO
2012-09-20Name : The remote host is missing a Mac OS X update that fixes several security issues.
File : macosx_10_7_5.nasl - Type : ACT_GATHER_INFO
2012-09-20Name : The remote host is missing a Mac OS X update that fixes several security issues.
File : macosx_10_8_2.nasl - Type : ACT_GATHER_INFO
2012-09-20Name : The remote host is missing a Mac OS X update that fixes several security issues.
File : macosx_SecUpd2012-004.nasl - Type : ACT_GATHER_INFO
2012-08-01Name : The remote Scientific Linux host is missing one or more security updates.
File : sl_20120607_bind97_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2012-08-01Name : The remote Scientific Linux host is missing one or more security updates.
File : sl_20120607_bind_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2012-06-29Name : The remote Debian host is missing a security-related update.
File : debian_DSA-2486.nasl - Type : ACT_GATHER_INFO
2012-06-28Name : The remote FreeBSD host is missing one or more security-related updates.
File : freebsd_pkg_fc5231b6c06611e1b5e0000c299b62e1.nasl - Type : ACT_GATHER_INFO
2012-06-18Name : The remote SuSE 10 host is missing a security-related patch.
File : suse_bind-8169.nasl - Type : ACT_GATHER_INFO
2012-06-18Name : The remote Fedora host is missing a security update.
File : fedora_2012-8946.nasl - Type : ACT_GATHER_INFO
2012-06-18Name : The remote Fedora host is missing a security update.
File : fedora_2012-8962.nasl - Type : ACT_GATHER_INFO
2012-06-15Name : The remote Slackware host is missing a security update.
File : Slackware_SSA_2012-166-01.nasl - Type : ACT_GATHER_INFO
2012-06-14Name : The remote Fedora host is missing a security update.
File : fedora_2012-8968.nasl - Type : ACT_GATHER_INFO
2012-06-11Name : The remote Mandriva Linux host is missing one or more security updates.
File : mandriva_MDVSA-2012-089.nasl - Type : ACT_GATHER_INFO
2012-06-11Name : The remote name server may be affected by a denial of service / information d...
File : bind9_991_p1.nasl - Type : ACT_GATHER_INFO
2012-06-08Name : The remote Red Hat host is missing one or more security updates.
File : redhat-RHSA-2012-0716.nasl - Type : ACT_GATHER_INFO
2012-06-08Name : The remote Red Hat host is missing one or more security updates.
File : redhat-RHSA-2012-0717.nasl - Type : ACT_GATHER_INFO
2012-06-08Name : The remote CentOS host is missing one or more security updates.
File : centos_RHSA-2012-0716.nasl - Type : ACT_GATHER_INFO
2012-06-08Name : The remote CentOS host is missing one or more security updates.
File : centos_RHSA-2012-0717.nasl - Type : ACT_GATHER_INFO
2012-06-06Name : The remote Ubuntu host is missing one or more security-related patches.
File : ubuntu_USN-1462-1.nasl - Type : ACT_GATHER_INFO
2012-06-05Name : The remote FreeBSD host is missing one or more security-related updates.
File : freebsd_pkg_1ecc0d3fae8e11e1965b0024e88a8c98.nasl - Type : ACT_GATHER_INFO

Internal Sources (Detail)

SourceUrl
APPLEhttp://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html
CONFIRMhttp://support.apple.com/kb/HT5501
http://www.isc.org/software/bind/advisories/cve-2012-1667
https://kb.isc.org/article/AA-00698
HPhttp://marc.info/?l=bugtraq&m=134132772016230&w=2
http://marc.info/?l=bugtraq&m=134132772016230&w=2
MANDRIVAhttp://www.mandriva.com/security/advisories?name=MDVSA-2012:089
REDHAThttp://rhn.redhat.com/errata/RHSA-2012-1110.html
SECUNIAhttp://secunia.com/advisories/51096
SLACKWAREhttp://www.slackware.com/security/viewer.php?l=slackware-security&y=2012&...

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
DateInformations
2014-06-14 13:32:39
  • Multiple Updates
2014-02-17 11:09:09
  • Multiple Updates
2014-01-19 21:28:35
  • Multiple Updates
2013-11-25 13:20:27
  • Multiple Updates
2013-11-11 12:39:50
  • Multiple Updates
2013-06-21 13:19:11
  • Multiple Updates
2013-05-10 22:36:21
  • Multiple Updates
2013-04-19 13:20:07
  • Multiple Updates