2.6 - CVE-2009-4022

Executive Summary

Informations
Name	CVE-2009-4022	First vendor Publication	2009-11-25
Vendor	Cve	Last vendor Modification	2024-11-21

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:H/Au:N/C:N/I:P/A:N)
Cvss Base Score	2.6	Attack Range	Network
Cvss Impact Score	2.9	Attack Complexity	High
Cvss Expoit Score	4.9	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Unspecified vulnerability in ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P4, 9.5 before 9.5.2-P1, 9.6 before 9.6.1-P2, and 9.7 beta before 9.7.0b3, with DNSSEC validation enabled and checking disabled (CD), allows remote attackers to conduct DNS cache poisoning attacks by receiving a recursive client query and sending a response that contains an Additional section with crafted data, which is not properly handled when the response is processed "at the same time as requesting DNSSEC records (DO)," aka Bug 20438.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4022

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:10821

Oval ID:	oval:org.mitre.oval:def:10821
Title:	Unspecified vulnerability in ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P4, 9.5 before 9.5.2-P1, 9.6 before 9.6.1-P2, and 9.7 beta before 9.7.0b3, with DNSSEC validation enabled and checking disabled (CD), allows remote attackers to conduct DNS cache poisoning attacks by receiving a recursive client query and sending a response that contains an Additional section with crafted data, which is not properly handled when the response is processed "at the same time as requesting DNSSEC records (DO)," aka Bug 20438.
Description:	Unspecified vulnerability in ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P4, 9.5 before 9.5.2-P1, 9.6 before 9.6.1-P2, and 9.7 beta before 9.7.0b3, with DNSSEC validation enabled and checking disabled (CD), allows remote attackers to conduct DNS cache poisoning attacks by receiving a recursive client query and sending a response that contains an Additional section with crafted data, which is not properly handled when the response is processed "at the same time as requesting DNSSEC records (DO)," aka Bug 20438.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-4022	Version:	5
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section bind-utils is earlier than 30:9.3.6-4.P1.el5_4.1 AND bind-libbind-devel is earlier than 30:9.3.6-4.P1.el5_4.1 AND bind-devel is earlier than 30:9.3.6-4.P1.el5_4.1 AND bind-chroot is earlier than 30:9.3.6-4.P1.el5_4.1 AND caching-nameserver is earlier than 30:9.3.6-4.P1.el5_4.1 AND bind-sdb is earlier than 30:9.3.6-4.P1.el5_4.1 AND bind is earlier than 30:9.3.6-4.P1.el5_4.1 AND bind-libs is earlier than 30:9.3.6-4.P1.el5_4.1

Definition Id: oval:org.mitre.oval:def:11745

Oval ID:	oval:org.mitre.oval:def:11745
Title:	Vulnerability with DNSSEC validation enabled in BIND.
Description:	Unspecified vulnerability in ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P4, 9.5 before 9.5.2-P1, 9.6 before 9.6.1-P2, and 9.7 beta before 9.7.0b3, with DNSSEC validation enabled and checking disabled (CD), allows remote attackers to conduct DNS cache poisoning attacks by receiving a recursive client query and sending a response that contains an Additional section with crafted data, which is not properly handled when the response is processed "at the same time as requesting DNSSEC records (DO)," aka Bug 20438.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-4022	Version:	3
Platform(s):	IBM AIX 6.1	Product(s):
Definition Synopsis:
IBM AIX 6100-02 meets CVE-2009-4022 IBM AIX 6100-02 is installed AND NOT All filesets for APAR IZ71774 are installed AND Fileset Check. Fileset bos.net.tcp.client check. Fileset bos.net.tcp.client is greater than or equal 6.1.2.0 AND Fileset bos.net.tcp.client is less than or equal 6.1.2.6 OR Fileset bos.net.tcp.server check. Fileset bos.net.tcp.server is greater than or equal 6.1.2.0 AND Fileset bos.net.tcp.server is less than or equal 6.1.2.4 OR IBM AIX 6100-03 meets CVE-2009-4022 IBM AIX 6100-03 is installed AND NOT All filesets for APAR IZ71667 are installed AND Fileset Check. Fileset bos.net.tcp.server check. Fileset bos.net.tcp.server is greater than or equal 6.1.3.0 AND Fileset bos.net.tcp.server is less than or equal 6.1.3.2 OR Fileset bos.net.tcp.client check. Fileset bos.net.tcp.client is greater than or equal 6.1.3.0 AND Fileset bos.net.tcp.client is less than or equal 6.1.3.3 OR IBM AIX 6100-04 meets CVE-2009-4022 IBM AIX 6100-04 is installed AND NOT All filesets for APAR IZ68597 are installed AND Fileset Check Fileset bos.net.tcp.client check. Fileset bos.net.tcp.client is greater than or equal 6.1.4.0 AND Fileset bos.net.tcp.client is less than or equal 6.1.4.2 OR Fileset bos.net.tcp.server check. Fileset bos.net.tcp.server is greater than or equal 6.1.4.0 AND Fileset bos.net.tcp.server is less than or equal 6.1.4.1

Definition Id: oval:org.mitre.oval:def:13277

Oval ID:	oval:org.mitre.oval:def:13277
Title:	USN-865-1 -- bind9 vulnerability
Description:	Michael Sinatra discovered that Bind did not correctly validate certain records added to its cache. When DNSSEC validation is in use, a remote attacker could exploit this to spoof DNS entries and poison DNS caches. Among other things, this could lead to misdirected email and web traffic.
Family:	unix	Class:	patch
Reference(s):	USN-865-1 CVE-2009-4022	Version:	5
Platform(s):	Ubuntu 8.04 Ubuntu 8.10 Ubuntu 9.10 Ubuntu 6.06 Ubuntu 9.04	Product(s):	bind9
Definition Synopsis:
Release section Ubuntu 8.04 is installed AND Architecture section Architecture independent section Installed architecture is all AND bind9-doc DPKG is earlier than 1:9.4.2.dfsg.P2-2ubuntu0.4 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is lpia AND Packages section dnsutils DPKG is earlier than 1:9.4.2.dfsg.P2-2ubuntu0.4 AND libbind-dev DPKG is earlier than 1:9.4.2.dfsg.P2-2ubuntu0.4 AND libisc35 DPKG is earlier than 1:9.4.2.dfsg.P2-2ubuntu0.4 AND libdns36 DPKG is earlier than 1:9.4.2.dfsg.P2-2ubuntu0.4 AND libdns35 DPKG is earlier than 1:9.4.2.dfsg.P2-2ubuntu0.4 AND liblwres30 DPKG is earlier than 1:9.4.2.dfsg.P2-2ubuntu0.4 AND libbind9-30 DPKG is earlier than 1:9.4.2.dfsg.P2-2ubuntu0.4 AND lwresd DPKG is earlier than 1:9.4.2.dfsg.P2-2ubuntu0.4 AND bind9 DPKG is earlier than 1:9.4.2.dfsg.P2-2ubuntu0.4 AND libisccfg30 DPKG is earlier than 1:9.4.2.dfsg.P2-2ubuntu0.4 AND libisccc30 DPKG is earlier than 1:9.4.2.dfsg.P2-2ubuntu0.4 AND bind9-host DPKG is earlier than 1:9.4.2.dfsg.P2-2ubuntu0.4 OR Release section Ubuntu 8.10 is installed AND Architecture section Architecture independent section Installed architecture is all AND bind9-doc DPKG is earlier than 1:9.5.0.dfsg.P2-1ubuntu3.4 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is lpia AND Packages section dnsutils DPKG is earlier than 1:9.5.0.dfsg.P2-1ubuntu3.4 AND libbind-dev DPKG is earlier than 1:9.5.0.dfsg.P2-1ubuntu3.4 AND libisccc40 DPKG is earlier than 1:9.5.0.dfsg.P2-1ubuntu3.4 AND libisccfg40 DPKG is earlier than 1:9.5.0.dfsg.P2-1ubuntu3.4 AND libbind9-40 DPKG is earlier than 1:9.5.0.dfsg.P2-1ubuntu3.4 AND bind9utils DPKG is earlier than 1:9.5.0.dfsg.P2-1ubuntu3.4 AND libdns43 DPKG is earlier than 1:9.5.0.dfsg.P2-1ubuntu3.4 AND liblwres40 DPKG is earlier than 1:9.5.0.dfsg.P2-1ubuntu3.4 AND lwresd DPKG is earlier than 1:9.5.0.dfsg.P2-1ubuntu3.4 AND libdns44 DPKG is earlier than 1:9.5.0.dfsg.P2-1ubuntu3.4 AND libisc44 DPKG is earlier than 1:9.5.0.dfsg.P2-1ubuntu3.4 AND bind9 DPKG is earlier than 1:9.5.0.dfsg.P2-1ubuntu3.4 AND bind9-host DPKG is earlier than 1:9.5.0.dfsg.P2-1ubuntu3.4 OR Release section Ubuntu 9.10 is installed AND Architecture section Architecture independent section Installed architecture is all AND bind9-doc DPKG is earlier than 1:9.6.1.dfsg.P1-3ubuntu0.2 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is lpia AND Packages section dnsutils DPKG is earlier than 1:9.6.1.dfsg.P1-3ubuntu0.2 AND libbind-dev DPKG is earlier than 1:9.6.1.dfsg.P1-3ubuntu0.2 AND bind9 DPKG is earlier than 1:9.6.1.dfsg.P1-3ubuntu0.2 AND libbind9-50 DPKG is earlier than 1:9.6.1.dfsg.P1-3ubuntu0.2 AND bind9utils DPKG is earlier than 1:9.6.1.dfsg.P1-3ubuntu0.2 AND libisc50 DPKG is earlier than 1:9.6.1.dfsg.P1-3ubuntu0.2 AND liblwres50 DPKG is earlier than 1:9.6.1.dfsg.P1-3ubuntu0.2 AND lwresd DPKG is earlier than 1:9.6.1.dfsg.P1-3ubuntu0.2 AND libdns50 DPKG is earlier than 1:9.6.1.dfsg.P1-3ubuntu0.2 AND libdns53 DPKG is earlier than 1:9.6.1.dfsg.P1-3ubuntu0.2 AND libisccfg50 DPKG is earlier than 1:9.6.1.dfsg.P1-3ubuntu0.2 AND libisccc50 DPKG is earlier than 1:9.6.1.dfsg.P1-3ubuntu0.2 AND bind9-host DPKG is earlier than 1:9.6.1.dfsg.P1-3ubuntu0.2 OR Release section Ubuntu 6.06 is installed AND Architecture section Architecture independent section Installed architecture is all AND bind9-doc DPKG is earlier than 1:9.3.2-2ubuntu1.9 OR Architecture depended section Supported architectures section Installed architecture is sparc AND Installed architecture is powerpc AND Installed architecture is amd64 AND Installed architecture is i386 AND Packages section dnsutils DPKG is earlier than 1:9.3.2-2ubuntu1.9 AND libbind-dev DPKG is earlier than 1:9.3.2-2ubuntu1.9 AND libdns23 DPKG is earlier than 1:9.3.2-2ubuntu1.9 AND libisccfg1 DPKG is earlier than 1:9.3.2-2ubuntu1.9 AND libdns21 DPKG is earlier than 1:9.3.2-2ubuntu1.9 AND libisc11 DPKG is earlier than 1:9.3.2-2ubuntu1.9 AND libisccc0 DPKG is earlier than 1:9.3.2-2ubuntu1.9 AND libbind9-0 DPKG is earlier than 1:9.3.2-2ubuntu1.9 AND bind9-host DPKG is earlier than 1:9.3.2-2ubuntu1.9 AND bind9 DPKG is earlier than 1:9.3.2-2ubuntu1.9 AND liblwres9 DPKG is earlier than 1:9.3.2-2ubuntu1.9 AND lwresd DPKG is earlier than 1:9.3.2-2ubuntu1.9 OR Release section Ubuntu 9.04 is installed AND Architecture section Architecture independent section Installed architecture is all AND bind9-doc DPKG is earlier than 1:9.5.1.dfsg.P2-1ubuntu0.3 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is lpia AND Packages section dnsutils DPKG is earlier than 1:9.5.1.dfsg.P2-1ubuntu0.3 AND libbind-dev DPKG is earlier than 1:9.5.1.dfsg.P2-1ubuntu0.3 AND libisccc40 DPKG is earlier than 1:9.5.1.dfsg.P2-1ubuntu0.3 AND libisccfg40 DPKG is earlier than 1:9.5.1.dfsg.P2-1ubuntu0.3 AND bind9utils DPKG is earlier than 1:9.5.1.dfsg.P2-1ubuntu0.3 AND libisc45 DPKG is earlier than 1:9.5.1.dfsg.P2-1ubuntu0.3 AND liblwres40 DPKG is earlier than 1:9.5.1.dfsg.P2-1ubuntu0.3 AND lwresd DPKG is earlier than 1:9.5.1.dfsg.P2-1ubuntu0.3 AND libdns46 DPKG is earlier than 1:9.5.1.dfsg.P2-1ubuntu0.3 AND libbind9-40 DPKG is earlier than 1:9.5.1.dfsg.P2-1ubuntu0.3 AND libdns45 DPKG is earlier than 1:9.5.1.dfsg.P2-1ubuntu0.3 AND bind9 DPKG is earlier than 1:9.5.1.dfsg.P2-1ubuntu0.3 AND bind9-host DPKG is earlier than 1:9.5.1.dfsg.P2-1ubuntu0.3

Definition Id: oval:org.mitre.oval:def:13728

Oval ID:	oval:org.mitre.oval:def:13728
Title:	DSA-1961-1 bind9 -- DNS cache poisoning
Description:	Michael Sinatra discovered that the DNS resolver component in BIND does not properly check DNS records contained in additional sections of DNS responses, leading to a cache poisoning vulnerability. This vulnerability is only present in resolvers which have been configured with DNSSEC trust anchors, which is still rare. Note that this update contains an internal ABI change, which means that all BIND-related packages must be updated at the same time. In the unlikely event that you have compiled your own software against libdns, you must recompile this program, too. For the old stable distribution, this problem has been fixed in version 1:9.3.4-2etch6. For the stable distribution, this problem has been fixed in version 1:9.5.1.dfsg.P3-1+lenny1. For the unstable distribution and the testing distribution, this problem has been fixed in version 9.6.1.dfsg.P2-1. We recommend that you upgrade your bind9 packages.
Family:	unix	Class:	patch
Reference(s):	DSA-1961-1 CVE-2009-4022	Version:	7
Platform(s):	Debian GNU/Linux 5.0 Debian GNU/Linux 4.0	Product(s):	bind9
Definition Synopsis:
Release section Debian GNU/Linux 5.0 is installed AND Architecture section Architecture independent section Installed architecture is all AND ind9-doc DPKG is earlier than 1:9.5.1.dfsg.P3-1+lenny1 OR Architecture depended section Supported architectures section Installed architecture is s390 AND Installed architecture is amd64 AND Installed architecture is sparc AND Installed architecture is arm AND Installed architecture is i386 AND Installed architecture is armel AND Installed architecture is mips AND Installed architecture is ia64 AND Installed architecture is alpha AND Installed architecture is powerpc AND Installed architecture is mipsel AND Installed architecture is hppa AND Packages section libisc45 DPKG is earlier than 1:9.5.1.dfsg.P3-1+lenny1 AND libisccc40 DPKG is earlier than 1:9.5.1.dfsg.P3-1+lenny1 AND libisccfg40 DPKG is earlier than 1:9.5.1.dfsg.P3-1+lenny1 AND libbind9-40 DPKG is earlier than 1:9.5.1.dfsg.P3-1+lenny1 AND ind9 DPKG is earlier than 1:9.5.1.dfsg.P3-1+lenny1 AND ind9utils DPKG is earlier than 1:9.5.1.dfsg.P3-1+lenny1 AND liblwres40 DPKG is earlier than 1:9.5.1.dfsg.P3-1+lenny1 AND libbind-dev DPKG is earlier than 1:9.5.1.dfsg.P3-1+lenny1 AND libdns45 DPKG is earlier than 1:9.5.1.dfsg.P3-1+lenny1 AND ind9-host DPKG is earlier than 1:9.5.1.dfsg.P3-1+lenny1 AND nsutils DPKG is earlier than 1:9.5.1.dfsg.P3-1+lenny1 AND lwresd DPKG is earlier than 1:9.5.1.dfsg.P3-1+lenny1 OR Release section Debian GNU/Linux 4.0 is installed. AND Architecture section Architecture independent section Installed architecture is all AND ind9-doc DPKG is earlier than 1:9.3.4-2etch6 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is sparc AND Installed architecture is arm AND Installed architecture is i386 AND Installed architecture is mips AND Installed architecture is ia64 AND Installed architecture is alpha AND Installed architecture is powerpc AND Installed architecture is mipsel AND Installed architecture is hppa AND Packages section libbind-dev DPKG is earlier than 1:9.3.4-2etch6 AND libdns22 DPKG is earlier than 1:9.3.4-2etch6 AND libisccfg1 DPKG is earlier than 1:9.3.4-2etch6 AND libisccc0 DPKG is earlier than 1:9.3.4-2etch6 AND libisc11 DPKG is earlier than 1:9.3.4-2etch6 AND ind9 DPKG is earlier than 1:9.3.4-2etch6 AND libbind9-0 DPKG is earlier than 1:9.3.4-2etch6 AND ind9-host DPKG is earlier than 1:9.3.4-2etch6 AND nsutils DPKG is earlier than 1:9.3.4-2etch6 AND liblwres9 DPKG is earlier than 1:9.3.4-2etch6 AND lwresd DPKG is earlier than 1:9.3.4-2etch6

Definition Id: oval:org.mitre.oval:def:22841

Oval ID:	oval:org.mitre.oval:def:22841
Title:	ELSA-2009:1620: bind security update (Moderate)
Description:	Unspecified vulnerability in ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P4, 9.5 before 9.5.2-P1, 9.6 before 9.6.1-P2, and 9.7 beta before 9.7.0b3, with DNSSEC validation enabled and checking disabled (CD), allows remote attackers to conduct DNS cache poisoning attacks by receiving a recursive client query and sending a response that contains an Additional section with crafted data, which is not properly handled when the response is processed "at the same time as requesting DNSSEC records (DO)," aka Bug 20438.
Family:	unix	Class:	patch
Reference(s):	ELSA-2009:1620-01 CVE-2009-4022	Version:	6
Platform(s):	Oracle Linux 5	Product(s):	bind
Definition Synopsis:
Oracle Linux 5.x rpm test bind-libbind-devel is earlier than 30:9.3.6-4.P1.el5_4.1 AND bind-devel is earlier than 30:9.3.6-4.P1.el5_4.1 AND bind-chroot is earlier than 30:9.3.6-4.P1.el5_4.1 AND bind-utils is earlier than 30:9.3.6-4.P1.el5_4.1 AND bind-sdb is earlier than 30:9.3.6-4.P1.el5_4.1 AND bind is earlier than 30:9.3.6-4.P1.el5_4.1 AND bind-libs is earlier than 30:9.3.6-4.P1.el5_4.1 AND caching-nameserver is earlier than 30:9.3.6-4.P1.el5_4.1

Definition Id: oval:org.mitre.oval:def:29109

Oval ID:	oval:org.mitre.oval:def:29109
Title:	RHSA-2009:1620 -- bind security update (Moderate)
Description:	Updated bind packages that fix one security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.
Family:	unix	Class:	patch
Reference(s):	RHSA-2009:1620 CESA-2009:1620-CentOS 5 CVE-2009-4022	Version:	3
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5	Product(s):	bind
Definition Synopsis:
Operation system section The operating system installed on the system is Red Hat Enterprise Linux 5 AND The operating system installed on the system is CentOS Linux 5.x Packages match section bind-chroot is earlier than 30:9.3.6-4.P1.el5_4.1 AND bind-devel is earlier than 30:9.3.6-4.P1.el5_4.1 AND bind-libbind-devel is earlier than 30:9.3.6-4.P1.el5_4.1 AND caching-nameserver is earlier than 30:9.3.6-4.P1.el5_4.1 AND bind is earlier than 30:9.3.6-4.P1.el5_4.1 AND bind-libs is earlier than 30:9.3.6-4.P1.el5_4.1 AND bind-sdb is earlier than 30:9.3.6-4.P1.el5_4.1 AND bind-utils is earlier than 30:9.3.6-4.P1.el5_4.1

Definition Id: oval:org.mitre.oval:def:7261

Oval ID:	oval:org.mitre.oval:def:7261
Title:	HP-UX Running BIND, Remote Denial of Service (DoS), Unauthorized Disclosure of Information
Description:	Unspecified vulnerability in ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P4, 9.5 before 9.5.2-P1, 9.6 before 9.6.1-P2, and 9.7 beta before 9.7.0b3, with DNSSEC validation enabled and checking disabled (CD), allows remote attackers to conduct DNS cache poisoning attacks by receiving a recursive client query and sending a response that contains an Additional section with crafted data, which is not properly handled when the response is processed "at the same time as requesting DNSSEC records (DO)," aka Bug 20438.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-4022	Version:	6
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02546 HP Release B.11.23 AND filesets tests BindUpgrade.BIND-UPGRADE version is less than C.9.3.2.7.0 AND BindUpgrade.BIND2-UPGRADE version is less than C.9.3.2.7.0 OR Criteria meets HP Security Bulletin HPSBUX02546 HP Release B.11.23 AND filesets tests InternetSrvcs.INETSVCS-INETD is installed AND InternetSrvcs.INETSVCS-RUN is installed AND InternetSrvcs.INETSVCS2-RUN is installed AND NOT Patch PHNE_40339 is installed OR Criteria meets HP Security Bulletin HPSBUX02546 HP Release B.11.11 AND BindUpgrade.BIND-UPGRADE version is less than C.9.3.2.7.0 OR Criteria meets HP Security Bulletin HPSBUX02546 HP Release B.11.11 AND BINDv920.INETSVCS-BIND version is less than B.11.11.01.015

Definition Id: oval:org.mitre.oval:def:7332

Oval ID:	oval:org.mitre.oval:def:7332
Title:	DSA-1961 bind9 -- DNS cache poisoning
Description:	Michael Sinatra discovered that the DNS resolver component in BIND does not properly check DNS records contained in additional sections of DNS responses, leading to a cache poisoning vulnerability. This vulnerability is only present in resolvers which have been configured with DNSSEC trust anchors, which is still rare. Note that this update contains an internal ABI change, which means that all BIND-related packages must be updated at the same time. In the unlikely event that you have compiled your own software against libdns, you must recompile this programs, too.
Family:	unix	Class:	patch
Reference(s):	DSA-1961 CVE-2009-4022	Version:	5
Platform(s):	Debian GNU/Linux 5.0 Debian GNU/Linux 4.0	Product(s):	bind9
Definition Synopsis:
Release section Debian GNU/Linux 5.0 is installed AND Architecture section Architecture independent section Installed architecture is all AND bind9-doc is earlier than 9.5.1.dfsg.P3-1+lenny1 OR Architecture dependent section Supported architectures section Installed architecture is s390 AND Installed architecture is amd64 AND Installed architecture is sparc AND Installed architecture is arm AND Installed architecture is i386 AND Installed architecture is armel AND Installed architecture is mips AND Installed architecture is ia64 AND Installed architecture is alpha AND Installed architecture is powerpc AND Installed architecture is mipsel AND Installed architecture is hppa AND Packages section dnsutils is earlier than 9.5.1.dfsg.P3-1+lenny1 AND libbind9-40 is earlier than 9.5.1.dfsg.P3-1+lenny1 AND libisccc40 is earlier than 9.5.1.dfsg.P3-1+lenny1 AND libisccfg40 is earlier than 9.5.1.dfsg.P3-1+lenny1 AND bind9utils is earlier than 9.5.1.dfsg.P3-1+lenny1 AND libisc45 is earlier than 9.5.1.dfsg.P3-1+lenny1 AND liblwres40 is earlier than 9.5.1.dfsg.P3-1+lenny1 AND lwresd is earlier than 9.5.1.dfsg.P3-1+lenny1 AND libbind-dev is earlier than 9.5.1.dfsg.P3-1+lenny1 AND libdns45 is earlier than 9.5.1.dfsg.P3-1+lenny1 AND bind9 is earlier than 9.5.1.dfsg.P3-1+lenny1 AND bind9-host is earlier than 9.5.1.dfsg.P3-1+lenny1 OR Release section Debian GNU/Linux 4.0 is installed. AND Architecture section Architecture independent section Installed architecture is all AND bind9-doc is earlier than 9.3.4-2etch6 OR Architecture dependent section Supported architectures section Installed architecture is amd64 AND Installed architecture is sparc AND Installed architecture is arm AND Installed architecture is i386 AND Installed architecture is mips AND Installed architecture is ia64 AND Installed architecture is alpha AND Installed architecture is powerpc AND Installed architecture is mipsel AND Installed architecture is hppa AND Packages section dnsutils is earlier than 9.3.4-2etch6 AND libbind-dev is earlier than 9.3.4-2etch6 AND libdns22 is earlier than 9.3.4-2etch6 AND libisccfg1 is earlier than 9.3.4-2etch6 AND libisccc0 is earlier than 9.3.4-2etch6 AND libisc11 is earlier than 9.3.4-2etch6 AND libbind9-0 is earlier than 9.3.4-2etch6 AND bind9-host is earlier than 9.3.4-2etch6 AND bind9 is earlier than 9.3.4-2etch6 AND liblwres9 is earlier than 9.3.4-2etch6 AND lwresd is earlier than 9.3.4-2etch6

Definition Id: oval:org.mitre.oval:def:7459

Oval ID:	oval:org.mitre.oval:def:7459
Title:	Security Vulnerability in BIND DNS Software Shipped With Solaris May Allow DNS Cache Poisoning
Description:	Unspecified vulnerability in ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P4, 9.5 before 9.5.2-P1, 9.6 before 9.6.1-P2, and 9.7 beta before 9.7.0b3, with DNSSEC validation enabled and checking disabled (CD), allows remote attackers to conduct DNS cache poisoning attacks by receiving a recursive client query and sending a response that contains an Additional section with crafted data, which is not properly handled when the response is processed "at the same time as requesting DNSSEC records (DO)," aka Bug 20438.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-4022	Version:	3
Platform(s):	Sun Solaris 9 Sun Solaris 10	Product(s):
Definition Synopsis:
Software Section Solaris 9 (SPARC) meets Sun Alert 273169 Solaris 9 (SPARC) is installed AND NOT Patch 112837-21 or later installed OR Solaris 10 (SPARC) meets Sun Alert 273169 Solaris 10 (SPARC) is installed AND NOT Patch 119783-14 or later installed OR Solaris 9 (x86) meets Sun Alert 273169 Solaris 9 (x86) is installed AND NOT Patch 114265-20 or later installed OR Solaris 10 (x86) meets Sun Alert 273169 Solaris 10 (x86) is installed AND NOT Patch 119784-14 or later installed AND in.named running

CPE : Common Platform Enumeration

Type	Description	Count
Application	Isc Bind cpe:2.3:a:isc:bind:9.7.0:p1:::-:::* cpe:2.3:a:isc:bind:9.7.0:rc2:::-:::* cpe:2.3:a:isc:bind:9.7.0:rc1:::-:::* cpe:2.3:a:isc:bind:9.7.0::::-::: cpe:2.3:a:isc:bind:9.7.0:b1:::-:::* cpe:2.3:a:isc:bind:9.7.0:b3:::-:::* cpe:2.3:a:isc:bind:9.7.0:b2:::-:::* cpe:2.3:a:isc:bind:9.7.0:a3:::-:::* cpe:2.3:a:isc:bind:9.7.0:a2:::-:::* cpe:2.3:a:isc:bind:9.7.0:a1:::-:::* cpe:2.3:a:isc:bind:9.6.1:rc1:::-:::* cpe:2.3:a:isc:bind:9.6.1:p1:::-:::* cpe:2.3:a:isc:bind:9.6.1::::-::: cpe:2.3:a:isc:bind:9.6.1:b1:::-:::* cpe:2.3:a:isc:bind:9.6.0:rc1:::-:::* cpe:2.3:a:isc:bind:9.6.0:rc2:::-:::* cpe:2.3:a:isc:bind:9.6.0:p1:::-:::* cpe:2.3:a:isc:bind:9.6.0::::-::: cpe:2.3:a:isc:bind:9.6.0:b1:::-:::* cpe:2.3:a:isc:bind:9.6.0:a1:::-:::* cpe:2.3:a:isc:bind:9.5.2::::-::: cpe:2.3:a:isc:bind:9.5.2:rc1:::-:::* cpe:2.3:a:isc:bind:9.5.2:b1:::-:::* cpe:2.3:a:isc:bind:9.5.1:rc2:::-:::* cpe:2.3:a:isc:bind:9.5.1:rc1:::-:::* cpe:2.3:a:isc:bind:9.5.1::::-::: cpe:2.3:a:isc:bind:9.5.1:b1:::-:::* cpe:2.3:a:isc:bind:9.5.1:b3:::-:::* cpe:2.3:a:isc:bind:9.5.1:b2:::-:::* cpe:2.3:a:isc:bind:9.5.0:rc1:::-:::* cpe:2.3:a:isc:bind:9.5.0::::-::: cpe:2.3:a:isc:bind:9.5.0:b1:::-:::* cpe:2.3:a:isc:bind:9.5.0:b3:::-:::* cpe:2.3:a:isc:bind:9.5.0:b2:::-:::* cpe:2.3:a:isc:bind:9.5.0:p2_w2:::-:::* cpe:2.3:a:isc:bind:9.5.0:p2_w1:::-:::* cpe:2.3:a:isc:bind:9.5.0:a3:::-:::* cpe:2.3:a:isc:bind:9.5.0:a2:::-:::* cpe:2.3:a:isc:bind:9.5.0:a1:::-:::* cpe:2.3:a:isc:bind:9.5.0:a7:::-:::* cpe:2.3:a:isc:bind:9.5.0:a6:::-:::* cpe:2.3:a:isc:bind:9.5.0:a5:::-:::* cpe:2.3:a:isc:bind:9.5.0:p2:::-:::* cpe:2.3:a:isc:bind:9.5.0:p1:::-:::* cpe:2.3:a:isc:bind:9.5.0:a4:::-:::* cpe:2.3:a:isc:bind:9.4.3:rc1:::-:::* cpe:2.3:a:isc:bind:9.4.3::::-::: cpe:2.3:a:isc:bind:9.4.3:p2:::-:::* cpe:2.3:a:isc:bind:9.4.3:b1:::-:::* cpe:2.3:a:isc:bind:9.4.3:b3:::-:::* cpe:2.3:a:isc:bind:9.4.3:b2:::-:::* cpe:2.3:a:isc:bind:9.4.3:p3:::-:::* cpe:2.3:a:isc:bind:9.4.3:p1:::-:::* cpe:2.3:a:isc:bind:9.4.2::::-::: cpe:2.3:a:isc:bind:9.4.2:rc1:::-:::* cpe:2.3:a:isc:bind:9.4.2:rc2:::-:::* cpe:2.3:a:isc:bind:9.4.1::::-::: cpe:2.3:a:isc:bind:9.4.0::::-::: cpe:2.3:a:isc:bind:9.4.0:rc1:::-:::* cpe:2.3:a:isc:bind:9.4.0:rc2:::-:::* cpe:2.3:a:isc:bind:9.4.0:a6:::-:::* cpe:2.3:a:isc:bind:9.4.0:a5:::-:::* cpe:2.3:a:isc:bind:9.4.0:b4:::-:::* cpe:2.3:a:isc:bind:9.4.0:b3:::-:::* cpe:2.3:a:isc:bind:9.4.0:b2:::-:::* cpe:2.3:a:isc:bind:9.4.0:b1:::-:::* cpe:2.3:a:isc:bind:9.4.0:a4:::-:::* cpe:2.3:a:isc:bind:9.4.0:a3:::-:::* cpe:2.3:a:isc:bind:9.4.0:a2:::-:::* cpe:2.3:a:isc:bind:9.4.0:a1:::-:::* cpe:2.3:a:isc:bind:9.3.6::::-::: cpe:2.3:a:isc:bind:9.3.6:rc1:::-:::* cpe:2.3:a:isc:bind:9.3.5::::-::: cpe:2.3:a:isc:bind:9.3.5:rc1:::-:::* cpe:2.3:a:isc:bind:9.3.5:rc2:::-:::* cpe:2.3:a:isc:bind:9.3.4::::-::: cpe:2.3:a:isc:bind:9.3.3::::-::: cpe:2.3:a:isc:bind:9.3.3:rc3:::-:::* cpe:2.3:a:isc:bind:9.3.3:rc1:::-:::* cpe:2.3:a:isc:bind:9.3.3:rc2:::-:::* cpe:2.3:a:isc:bind:9.3.2::::-::: cpe:2.3:a:isc:bind:9.3.2:rc1:::-:::* cpe:2.3:a:isc:bind:9.3.1::::-::: cpe:2.3:a:isc:bind:9.3.1:rc1:::-:::* cpe:2.3:a:isc:bind:9.3.1:b2:::-:::* cpe:2.3:a:isc:bind:9.3.0::::-::: cpe:2.3:a:isc:bind:9.3.0:rc1:::-:::* cpe:2.3:a:isc:bind:9.3.0:rc4:::-:::* cpe:2.3:a:isc:bind:9.3.0:rc3:::-:::* cpe:2.3:a:isc:bind:9.3.0:rc2:::-:::* cpe:2.3:a:isc:bind:9.3.0:b4:::-:::* cpe:2.3:a:isc:bind:9.3.0:b3:::-:::* cpe:2.3:a:isc:bind:9.3.0:b2:::-:::* cpe:2.3:a:isc:bind:9.3::::-::: cpe:2.3:a:isc:bind:9.2.9::::-::: cpe:2.3:a:isc:bind:9.2.9:rc1:::-:::* cpe:2.3:a:isc:bind:9.2.8::::-::: cpe:2.3:a:isc:bind:9.2.7::::-::: cpe:2.3:a:isc:bind:9.2.7:rc3:::-:::* cpe:2.3:a:isc:bind:9.2.7:rc1:::-:::* cpe:2.3:a:isc:bind:9.2.7:rc2:::-:::* cpe:2.3:a:isc:bind:9.2.6::::-::: cpe:2.3:a:isc:bind:9.2.6:rc1:::-:::* cpe:2.3:a:isc:bind:9.2.5::::-::: cpe:2.3:a:isc:bind:9.2.5:rc1:::-:::* cpe:2.3:a:isc:bind:9.2.5:b2:::-:::* cpe:2.3:a:isc:bind:9.2.4::::-::: cpe:2.3:a:isc:bind:9.2.4:rc7:::-:::* cpe:2.3:a:isc:bind:9.2.4:rc8:::-:::* cpe:2.3:a:isc:bind:9.2.4:rc2:::-:::* cpe:2.3:a:isc:bind:9.2.4:rc3:::-:::* cpe:2.3:a:isc:bind:9.2.4:rc6:::-:::* cpe:2.3:a:isc:bind:9.2.4:rc5:::-:::* cpe:2.3:a:isc:bind:9.2.4:rc4:::-:::* cpe:2.3:a:isc:bind:9.2.3::::-::: cpe:2.3:a:isc:bind:9.2.3:rc3:::-:::* cpe:2.3:a:isc:bind:9.2.3:rc1:::-:::* cpe:2.3:a:isc:bind:9.2.3:rc4:::-:::* cpe:2.3:a:isc:bind:9.2.3:rc2:::-:::* cpe:2.3:a:isc:bind:9.2.2::::-::: cpe:2.3:a:isc:bind:9.2.2:p3:::-:::* cpe:2.3:a:isc:bind:9.2.2:rc1:::-:::* cpe:2.3:a:isc:bind:9.2.2:p2:::-:::* cpe:2.3:a:isc:bind:9.2.1::::-::: cpe:2.3:a:isc:bind:9.2.1:rc1:::-:::* cpe:2.3:a:isc:bind:9.2.1:rc2:::-:::* cpe:2.3:a:isc:bind:9.2.0::::-::: cpe:2.3:a:isc:bind:9.2.0:rc4:::-:::* cpe:2.3:a:isc:bind:9.2.0:rc9:::-:::* cpe:2.3:a:isc:bind:9.2.0:rc5:::-:::* cpe:2.3:a:isc:bind:9.2.0:rc10:::-:::* cpe:2.3:a:isc:bind:9.2.0:rc3:::-:::* cpe:2.3:a:isc:bind:9.2.0:rc2:::-:::* cpe:2.3:a:isc:bind:9.2.0:rc1:::-:::* cpe:2.3:a:isc:bind:9.2.0:rc7:::-:::* cpe:2.3:a:isc:bind:9.2.0:rc6:::-:::* cpe:2.3:a:isc:bind:9.2.0:rc8:::-:::* cpe:2.3:a:isc:bind:9.2.0:b1:::-:::* cpe:2.3:a:isc:bind:9.2.0:a1:::-:::* cpe:2.3:a:isc:bind:9.2.0:b2:::-:::* cpe:2.3:a:isc:bind:9.2.0:a2:::-:::* cpe:2.3:a:isc:bind:9.2.0:a3:::-:::* cpe:2.3:a:isc:bind:9.2::::-::: cpe:2.3:a:isc:bind:9.1.3::::-::: cpe:2.3:a:isc:bind:9.1.3:rc1:::-:::* cpe:2.3:a:isc:bind:9.1.3:rc2:::-:::* cpe:2.3:a:isc:bind:9.1.3:rc3:::-:::* cpe:2.3:a:isc:bind:9.1.2::::-::: cpe:2.3:a:isc:bind:9.1.2:rc1:::-:::* cpe:2.3:a:isc:bind:9.1.1::::-::: cpe:2.3:a:isc:bind:9.1.1:rc6:::-:::* cpe:2.3:a:isc:bind:9.1.1:rc7:::-:::* cpe:2.3:a:isc:bind:9.1.1:rc3:::-:::* cpe:2.3:a:isc:bind:9.1.1:rc2:::-:::* cpe:2.3:a:isc:bind:9.1.1:rc4:::-:::* cpe:2.3:a:isc:bind:9.1.1:rc5:::-:::* cpe:2.3:a:isc:bind:9.1.1:rc1:::-:::* cpe:2.3:a:isc:bind:9.1.0:rc1:::-:::* cpe:2.3:a:isc:bind:9.1::::-::: cpe:2.3:a:isc:bind:9.0.1::::-::: cpe:2.3:a:isc:bind:9.0.1:rc2:::-:::* cpe:2.3:a:isc:bind:9.0.1:rc1:::-:::* cpe:2.3:a:isc:bind:9.0.0:rc4:::-:::* cpe:2.3:a:isc:bind:9.0.0:rc5:::-:::* cpe:2.3:a:isc:bind:9.0.0:rc2:::-:::* cpe:2.3:a:isc:bind:9.0.0:rc6:::-:::* cpe:2.3:a:isc:bind:9.0.0:rc1:::-:::* cpe:2.3:a:isc:bind:9.0.0:rc3:::-:::* cpe:2.3:a:isc:bind:9.0::::-:::	169

OpenVAS Exploits

Date	Description
2011-10-20	Name : Mac OS X v10.6.8 Multiple Vulnerabilities (2011-006) File : nvt/gb_macosx_su11-006.nasl
2011-08-09	Name : CentOS Update for bind CESA-2010:0062 centos5 i386 File : nvt/gb_CESA-2010_0062_bind_centos5_i386.nasl
2011-08-09	Name : CentOS Update for bind CESA-2009:1620 centos5 i386 File : nvt/gb_CESA-2009_1620_bind_centos5_i386.nasl
2011-03-09	Name : Gentoo Security Advisory GLSA 201006-11 (BIND) File : nvt/glsa_201006_11.nasl
2010-10-01	Name : HP-UX Update for BIND HPSBUX02546 File : nvt/gb_hp_ux_HPSBUX02546.nasl
2010-03-02	Name : Fedora Update for bind FEDORA-2010-0868 File : nvt/gb_fedora_2010_0868_bind_fc12.nasl
2010-03-02	Name : Fedora Update for bind FEDORA-2010-0861 File : nvt/gb_fedora_2010_0861_bind_fc11.nasl
2010-01-29	Name : SuSE Update for acroread SUSE-SA:2010:008 File : nvt/gb_suse_2010_008.nasl
2010-01-25	Name : RedHat Update for bind RHSA-2010:0062-02 File : nvt/gb_RHSA-2010_0062-02_bind.nasl
2010-01-22	Name : Ubuntu Update for bind9 vulnerabilities USN-888-1 File : nvt/gb_ubuntu_USN_888_1.nasl
2010-01-22	Name : Mandriva Update for bind MDVSA-2010:021 (bind) File : nvt/gb_mandriva_MDVSA_2010_021.nasl
2010-01-11	Name : FreeBSD Security Advisory (FreeBSD-SA-10:01.bind.asc) File : nvt/freebsdsa_bind8.nasl
2009-12-30	Name : CentOS Security Advisory CESA-2009:1620 (bind) File : nvt/ovcesa2009_1620.nasl
2009-12-30	Name : Debian Security Advisory DSA 1961-1 (bind9) File : nvt/deb_1961_1.nasl
2009-12-10	Name : Mandriva Security Advisory MDVSA-2009:313-1 (bind) File : nvt/mdksa_2009_313_1.nasl
2009-12-10	Name : SuSE Security Advisory SUSE-SA:2009:059 (bind) File : nvt/suse_sa_2009_059.nasl
2009-12-10	Name : Ubuntu USN-865-1 (bind9) File : nvt/ubuntu_865_1.nasl
2009-12-03	Name : Fedora Core 12 FEDORA-2009-12233 (bind) File : nvt/fcore_2009_12233.nasl
2009-12-03	Name : Fedora Core 11 FEDORA-2009-12218 (bind) File : nvt/fcore_2009_12218.nasl
2009-12-03	Name : SLES11: Security update for bind File : nvt/sles11_bind0.nasl
2009-12-03	Name : RedHat Security Advisory RHSA-2009:1620 File : nvt/RHSA_2009_1620.nasl
2009-11-25	Name : ISC BIND 9 DNSSEC Query Response Additional Section Remote Cache Poisoning Vu... File : nvt/bind_37118.nasl
0000-00-00	Name : Slackware Advisory SSA:2010-176-01 bind File : nvt/esoft_slk_ssa_2010_176_01.nasl
0000-00-00	Name : Slackware Advisory SSA:2009-336-01 bind File : nvt/esoft_slk_ssa_2009_336_01.nasl

Open Source Vulnerability Database (OSVDB)

Id	Description
60493	ISC BIND DNSSEC Recursive Query Additional Section Cache Poisoning

Nessus® Vulnerability Scanner

Date	Description
2016-03-08	Name : The remote VMware ESX host is missing a security-related patch. File : vmware_VMSA-2010-0004_remote.nasl - Type : ACT_GATHER_INFO
2014-11-04	Name : The remote device is missing a vendor-supplied security patch. File : f5_bigip_SOL15787.nasl - Type : ACT_GATHER_INFO
2014-10-28	Name : The remote device is missing a vendor-supplied security patch. File : f5_bigip_SOL15748.nasl - Type : ACT_GATHER_INFO
2014-10-10	Name : The remote device is missing a vendor-supplied security patch. File : f5_bigip_SOL10898.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2010-0062.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2009-1620.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20100120_bind_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20091130_bind_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2011-10-13	Name : The remote host is missing a Mac OS X update that fixes several security issues. File : macosx_SecUpd2011-006.nasl - Type : ACT_GATHER_INFO
2011-05-28	Name : The remote Slackware host is missing a security update. File : Slackware_SSA_2010-176-01.nasl - Type : ACT_GATHER_INFO
2011-05-28	Name : The remote Slackware host is missing a security update. File : Slackware_SSA_2009-336-01.nasl - Type : ACT_GATHER_INFO
2010-06-07	Name : The remote HP-UX host is missing a security-related patch. File : hpux_PHNE_40339.nasl - Type : ACT_GATHER_INFO
2010-06-02	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201006-11.nasl - Type : ACT_GATHER_INFO
2010-03-05	Name : The remote VMware ESX host is missing one or more security-related patches. File : vmware_VMSA-2010-0004.nasl - Type : ACT_GATHER_INFO
2010-02-24	Name : The remote Debian host is missing a security-related update. File : debian_DSA-1961.nasl - Type : ACT_GATHER_INFO
2010-01-26	Name : The remote openSUSE host is missing a security update. File : suse_11_0_bind-100121.nasl - Type : ACT_GATHER_INFO
2010-01-26	Name : The remote openSUSE host is missing a security update. File : suse_11_1_bind-100121.nasl - Type : ACT_GATHER_INFO
2010-01-26	Name : The remote openSUSE host is missing a security update. File : suse_11_2_bind-100121.nasl - Type : ACT_GATHER_INFO
2010-01-26	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_bind-100121.nasl - Type : ACT_GATHER_INFO
2010-01-21	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0062.nasl - Type : ACT_GATHER_INFO
2010-01-21	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2010-0062.nasl - Type : ACT_GATHER_INFO
2010-01-21	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2010-021.nasl - Type : ACT_GATHER_INFO
2010-01-21	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-888-1.nasl - Type : ACT_GATHER_INFO
2010-01-06	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2009-1620.nasl - Type : ACT_GATHER_INFO
2009-12-08	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-865-1.nasl - Type : ACT_GATHER_INFO
2009-12-04	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2009-313.nasl - Type : ACT_GATHER_INFO
2009-12-02	Name : The remote name server is affected by a cache poisoning vulnerability. File : bind9_dnssec_cache_poisoning.nasl - Type : ACT_GATHER_INFO
2009-12-01	Name : The remote openSUSE host is missing a security update. File : suse_11_1_bind-091127.nasl - Type : ACT_GATHER_INFO
2009-12-01	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_bind-091127.nasl - Type : ACT_GATHER_INFO
2009-12-01	Name : The remote openSUSE host is missing a security update. File : suse_11_2_bind-091127.nasl - Type : ACT_GATHER_INFO
2009-12-01	Name : The remote openSUSE host is missing a security update. File : suse_11_0_bind-091127.nasl - Type : ACT_GATHER_INFO
2009-12-01	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2009-1620.nasl - Type : ACT_GATHER_INFO
2009-11-30	Name : The remote Fedora host is missing a security update. File : fedora_2009-12218.nasl - Type : ACT_GATHER_INFO
2009-11-30	Name : The remote Fedora host is missing a security update. File : fedora_2009-12233.nasl - Type : ACT_GATHER_INFO
2009-11-30	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2009-304.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

ftp://ftp.sco.com/pub/unixware7/714/security/p535243_uw7/p535243b.txt
http://aix.software.ibm.com/aix/efixes/security/bind9_advisory.asc
http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html
http://lists.vmware.com/pipermail/security-announce/2010/000082.html
http://osvdb.org/60493
http://secunia.com/advisories/37426
http://secunia.com/advisories/37491
http://secunia.com/advisories/38219
http://secunia.com/advisories/38240
http://secunia.com/advisories/38794
http://secunia.com/advisories/38834
http://secunia.com/advisories/39334
http://secunia.com/advisories/40730
http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021660.1-1
http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021798.1-1
http://support.apple.com/kb/HT5002
http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0018
http://www.ibm.com/support/docview.wss?uid=isg1IZ68597
http://www.ibm.com/support/docview.wss?uid=isg1IZ71667
http://www.ibm.com/support/docview.wss?uid=isg1IZ71774
http://www.kb.cert.org/vuls/id/418861
http://www.mandriva.com/security/advisories?name=MDVSA-2009:304
http://www.openwall.com/lists/oss-security/2009/11/24/1
http://www.openwall.com/lists/oss-security/2009/11/24/2
http://www.openwall.com/lists/oss-security/2009/11/24/8
http://www.redhat.com/support/errata/RHSA-2009-1620.html
http://www.securityfocus.com/bid/37118
http://www.ubuntu.com/usn/USN-888-1
http://www.vupen.com/english/advisories/2009/3335
http://www.vupen.com/english/advisories/2010/0176
http://www.vupen.com/english/advisories/2010/0528
http://www.vupen.com/english/advisories/2010/0622
https://bugzilla.redhat.com/show_bug.cgi?id=538744
https://exchange.xforce.ibmcloud.com/vulnerabilities/54416
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_n...
https://issues.rpath.com/browse/RPL-3152
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova...
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova...
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova...
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova...
https://www.isc.org/advisories/CVE-2009-4022v6
https://www.isc.org/advisories/CVE2009-4022
https://www.redhat.com/archives/fedora-package-announce/2009-November/msg0117...
https://www.redhat.com/archives/fedora-package-announce/2009-November/msg0118...

Source	Url

Alert History

If you want to see full details history, please login or register.

Date	Informations
2024-11-28 23:09:53	Multiple Updates
2024-11-28 12:20:15	Multiple Updates
2024-08-02 12:12:28	Multiple Updates
2024-08-02 01:03:23	Multiple Updates
2024-02-02 01:11:57	Multiple Updates
2024-02-01 12:03:20	Multiple Updates
2023-09-05 12:11:13	Multiple Updates
2023-09-05 01:03:11	Multiple Updates
2023-09-02 12:11:18	Multiple Updates
2023-09-02 01:03:13	Multiple Updates
2023-08-12 12:13:16	Multiple Updates
2023-08-12 01:03:12	Multiple Updates
2023-08-11 12:11:20	Multiple Updates
2023-08-11 01:03:20	Multiple Updates
2023-08-06 12:10:54	Multiple Updates
2023-08-06 01:03:14	Multiple Updates
2023-08-04 12:10:59	Multiple Updates
2023-08-04 01:03:16	Multiple Updates
2023-07-14 12:10:55	Multiple Updates
2023-07-14 01:03:14	Multiple Updates
2023-03-29 01:12:31	Multiple Updates
2023-03-28 12:03:20	Multiple Updates
2022-10-11 12:09:44	Multiple Updates
2022-10-11 01:03:02	Multiple Updates
2021-05-04 12:10:30	Multiple Updates
2021-04-22 01:10:57	Multiple Updates
2020-05-23 00:24:37	Multiple Updates
2017-09-19 09:23:30	Multiple Updates
2017-08-17 09:22:47	Multiple Updates
2016-12-07 09:24:10	Multiple Updates
2016-08-20 09:22:28	Multiple Updates
2016-06-28 17:54:06	Multiple Updates
2016-04-05 00:23:56	Multiple Updates
2016-03-09 13:25:54	Multiple Updates
2014-11-05 13:27:40	Multiple Updates
2014-10-29 13:24:29	Multiple Updates
2014-10-11 13:26:04	Multiple Updates
2014-02-17 10:52:25	Multiple Updates
2013-05-11 00:01:16	Multiple Updates

Global Informations

Type	Count
Oval ID(s)	9
CPE ID(s)	169
Sources(s)	44
osvdb(s)	1
Openvas Exploit(s)	24
Nessus® Exploit(s)	35

	Related
9.3	VMSA-2010-0004
7.6	HPSBUX02546 SSR...
7.6	GLSA-201006-11
7.6	CVE-2010-0382
7.5	MDVSA-2009:304
4.3	USN-888-1
4.3	SUN-275890
4.3	RHSA-2010:0062
4.3	MDVSA-2010:021
4	CVE-2010-0290
2.6	VU#418861
2.6	SUN-273169
2.6	RHSA-2009:1620
2.6	MDVSA-2009:313-1
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 14 more Alert(s)

2.6 - CVE-2009-4022

Executive Summary

Security-Database Scoring CVSS v3

Security-Database Scoring CVSS v2

Detail

Original Source

OVAL Definitions

CPE : Common Platform Enumeration

OpenVAS Exploits

Open Source Vulnerability Database (OSVDB)

Nessus® Vulnerability Scanner

Sources (Detail)

Alert History

Global Informations

Open Standards

Other Databases

COMPANY

STANDARDS

RECENT POSTS

MENU