Executive Summary

Informations
Name CVE-2007-2925 First vendor Publication 2007-07-24
Vendor Cve Last vendor Modification 2024-11-21

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:P/I:P/A:N)
Cvss Base Score 5.8 Attack Range Network
Cvss Impact Score 4.9 Attack Complexity Medium
Cvss Expoit Score 8.6 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

The default access control lists (ACL) in ISC BIND 9.4.0, 9.4.1, and 9.5.0a1 through 9.5.0a5 do not set the allow-recursion and allow-query-cache ACLs, which allows remote attackers to make recursive queries and query the cache.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2925

CAPEC : Common Attack Pattern Enumeration & Classification

Id Name
CAPEC-1 Accessing Functionality Not Properly Constrained by ACLs
CAPEC-13 Subverting Environment Variable Values
CAPEC-17 Accessing, Modifying or Executing Executable Files
CAPEC-39 Manipulating Opaque Client-based Data Tokens
CAPEC-45 Buffer Overflow via Symbolic Links
CAPEC-51 Poison Web Service Registry
CAPEC-59 Session Credential Falsification through Prediction
CAPEC-60 Reusing Session IDs (aka Session Replay)
CAPEC-76 Manipulating Input to File System Calls
CAPEC-77 Manipulating User-Controlled Variables
CAPEC-87 Forceful Browsing
CAPEC-104 Cross Zone Scripting

CWE : Common Weakness Enumeration

% Id Name

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 3

OpenVAS Exploits

Date Description
2009-04-09 Name : Mandriva Update for bind MDKSA-2007:149 (bind)
File : nvt/gb_mandriva_MDKSA_2007_149.nasl
2009-02-27 Name : Fedora Update for bind FEDORA-2007-1247
File : nvt/gb_fedora_2007_1247_bind_fc7.nasl
2009-02-27 Name : Fedora Update for bind FEDORA-2007-4658
File : nvt/gb_fedora_2007_4658_bind_fc7.nasl
2009-02-17 Name : Fedora Update for bind FEDORA-2008-0904
File : nvt/gb_fedora_2008_0904_bind_fc7.nasl
2008-09-24 Name : Gentoo Security Advisory GLSA 200708-13 (bind)
File : nvt/glsa_200708_13.nasl
0000-00-00 Name : Slackware Advisory SSA:2007-207-01 bind
File : nvt/esoft_slk_ssa_2007_207_01.nasl

Open Source Vulnerability Database (OSVDB)

Id Description
36236 ISC BIND allow-query-cache/allow-recursion ACL Bypass

Nessus® Vulnerability Scanner

Date Description
2017-04-21 Name : The remote OracleVM host is missing one or more security updates.
File : oraclevm_OVMSA-2017-0066.nasl - Type : ACT_GATHER_INFO
2011-05-28 Name : The remote Slackware host is missing a security update.
File : Slackware_SSA_2007-207-01.nasl - Type : ACT_GATHER_INFO
2007-11-06 Name : The remote Fedora host is missing a security update.
File : fedora_2007-1247.nasl - Type : ACT_GATHER_INFO
2007-08-21 Name : The remote Gentoo host is missing one or more security-related patches.
File : gentoo_GLSA-200708-13.nasl - Type : ACT_GATHER_INFO
2007-07-27 Name : The remote Mandrake Linux host is missing one or more security updates.
File : mandrake_MDKSA-2007-149.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

http://secunia.com/advisories/26227
http://secunia.com/advisories/26236
http://secunia.com/advisories/26509
http://secunia.com/advisories/26515
http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=623903
http://www.gentoo.org/security/en/glsa/glsa-200708-13.xml
http://www.isc.org/index.pl?/sw/bind/bind-security.php
http://www.mandriva.com/security/advisories?name=MDKSA-2007:149
http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.022.html
http://www.securityfocus.com/bid/25076
http://www.securitytracker.com/id?1018441
http://www.slackware.org/security/viewer.php?l=slackware-security&y=2007&...
http://www.vupen.com/english/advisories/2007/2628
http://www.vupen.com/english/advisories/2007/2914
https://exchange.xforce.ibmcloud.com/vulnerabilities/35571
Source Url

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
Date Informations
2024-11-28 23:16:44
  • Multiple Updates
2024-11-28 12:12:29
  • Multiple Updates
2024-08-02 12:07:00
  • Multiple Updates
2024-08-02 01:02:19
  • Multiple Updates
2024-02-02 01:06:38
  • Multiple Updates
2024-02-01 12:02:18
  • Multiple Updates
2023-09-05 12:06:11
  • Multiple Updates
2023-09-05 01:02:09
  • Multiple Updates
2023-09-02 12:06:18
  • Multiple Updates
2023-09-02 01:02:10
  • Multiple Updates
2023-08-12 12:07:19
  • Multiple Updates
2023-08-12 01:02:10
  • Multiple Updates
2023-08-11 12:06:21
  • Multiple Updates
2023-08-11 01:02:14
  • Multiple Updates
2023-08-06 12:06:02
  • Multiple Updates
2023-08-06 01:02:11
  • Multiple Updates
2023-08-04 12:06:08
  • Multiple Updates
2023-08-04 01:02:14
  • Multiple Updates
2023-07-14 12:06:07
  • Multiple Updates
2023-07-14 01:02:12
  • Multiple Updates
2023-03-29 01:06:51
  • Multiple Updates
2023-03-28 12:02:17
  • Multiple Updates
2022-10-11 12:05:25
  • Multiple Updates
2022-10-11 01:02:02
  • Multiple Updates
2021-05-04 12:05:51
  • Multiple Updates
2021-04-22 01:06:24
  • Multiple Updates
2020-05-23 00:19:51
  • Multiple Updates
2018-10-31 00:19:49
  • Multiple Updates
2017-07-29 12:02:17
  • Multiple Updates
2017-04-22 13:25:52
  • Multiple Updates
2016-06-28 16:33:29
  • Multiple Updates
2016-04-26 16:11:35
  • Multiple Updates
2014-02-17 10:40:21
  • Multiple Updates
2013-05-11 10:27:09
  • Multiple Updates