Executive Summary

Name CVE-2007-2925 First vendor Publication 2007-07-24
Vendor Cve Last vendor Modification 2018-10-30

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:P/I:P/A:N)
Cvss Base Score 5.8 Attack Range Network
Cvss Impact Score 4.9 Attack Complexity Medium
Cvss Expoit Score 8.6 Authentication None Required
Calculate full CVSS 2.0 Vectors scores


The default access control lists (ACL) in ISC BIND 9.4.0, 9.4.1, and 9.5.0a1 through 9.5.0a5 do not set the allow-recursion and allow-query-cache ACLs, which allows remote attackers to make recursive queries and query the cache.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2925

CAPEC : Common Attack Pattern Enumeration & Classification

Id Name
CAPEC-1 Accessing Functionality Not Properly Constrained by ACLs
CAPEC-13 Subverting Environment Variable Values
CAPEC-17 Accessing, Modifying or Executing Executable Files
CAPEC-39 Manipulating Opaque Client-based Data Tokens
CAPEC-45 Buffer Overflow via Symbolic Links
CAPEC-51 Poison Web Service Registry
CAPEC-59 Session Credential Falsification through Prediction
CAPEC-60 Reusing Session IDs (aka Session Replay)
CAPEC-76 Manipulating Input to File System Calls
CAPEC-77 Manipulating User-Controlled Variables
CAPEC-87 Forceful Browsing
CAPEC-104 Cross Zone Scripting

CWE : Common Weakness Enumeration

% Id Name

CPE : Common Platform Enumeration

Application 3

OpenVAS Exploits

Date Description
2009-04-09 Name : Mandriva Update for bind MDKSA-2007:149 (bind)
File : nvt/gb_mandriva_MDKSA_2007_149.nasl
2009-02-27 Name : Fedora Update for bind FEDORA-2007-1247
File : nvt/gb_fedora_2007_1247_bind_fc7.nasl
2009-02-27 Name : Fedora Update for bind FEDORA-2007-4658
File : nvt/gb_fedora_2007_4658_bind_fc7.nasl
2009-02-17 Name : Fedora Update for bind FEDORA-2008-0904
File : nvt/gb_fedora_2008_0904_bind_fc7.nasl
2008-09-24 Name : Gentoo Security Advisory GLSA 200708-13 (bind)
File : nvt/glsa_200708_13.nasl
0000-00-00 Name : Slackware Advisory SSA:2007-207-01 bind
File : nvt/esoft_slk_ssa_2007_207_01.nasl

Open Source Vulnerability Database (OSVDB)

Id Description
36236 ISC BIND allow-query-cache/allow-recursion ACL Bypass

Nessus® Vulnerability Scanner

Date Description
2017-04-21 Name : The remote OracleVM host is missing one or more security updates.
File : oraclevm_OVMSA-2017-0066.nasl - Type : ACT_GATHER_INFO
2011-05-28 Name : The remote Slackware host is missing a security update.
File : Slackware_SSA_2007-207-01.nasl - Type : ACT_GATHER_INFO
2007-11-06 Name : The remote Fedora host is missing a security update.
File : fedora_2007-1247.nasl - Type : ACT_GATHER_INFO
2007-08-21 Name : The remote Gentoo host is missing one or more security-related patches.
File : gentoo_GLSA-200708-13.nasl - Type : ACT_GATHER_INFO
2007-07-27 Name : The remote Mandrake Linux host is missing one or more security updates.
File : mandrake_MDKSA-2007-149.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

Source Url
BID http://www.securityfocus.com/bid/25076
CONFIRM http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=623903
GENTOO http://www.gentoo.org/security/en/glsa/glsa-200708-13.xml
MANDRIVA http://www.mandriva.com/security/advisories?name=MDKSA-2007:149
OPENPKG http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.022.html
SECTRACK http://www.securitytracker.com/id?1018441
SECUNIA http://secunia.com/advisories/26227
SLACKWARE http://www.slackware.org/security/viewer.php?l=slackware-security&y=2007&...
VUPEN http://www.vupen.com/english/advisories/2007/2628
XF https://exchange.xforce.ibmcloud.com/vulnerabilities/35571

Alert History

If you want to see full details history, please login or register.
Date Informations
2021-05-04 12:05:51
  • Multiple Updates
2021-04-22 01:06:24
  • Multiple Updates
2020-05-23 00:19:51
  • Multiple Updates
2018-10-31 00:19:49
  • Multiple Updates
2017-07-29 12:02:17
  • Multiple Updates
2017-04-22 13:25:52
  • Multiple Updates
2016-06-28 16:33:29
  • Multiple Updates
2016-04-26 16:11:35
  • Multiple Updates
2014-02-17 10:40:21
  • Multiple Updates
2013-05-11 10:27:09
  • Multiple Updates