4 - CVE-2010-0290

Executive Summary

Informations
Name	CVE-2010-0290	First vendor Publication	2010-01-22
Vendor	Cve	Last vendor Modification	2024-11-21

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:H/Au:N/C:N/I:P/A:P)
Cvss Base Score	4	Attack Range	Network
Cvss Impact Score	4.9	Attack Complexity	High
Cvss Expoit Score	4.9	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Unspecified vulnerability in ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta, with DNSSEC validation enabled and checking disabled (CD), allows remote attackers to conduct DNS cache poisoning attacks by receiving a recursive client query and sending a response that contains (1) CNAME or (2) DNAME records, which do not have the intended validation before caching, aka Bug 20737. NOTE: this vulnerability exists because of an incomplete fix for CVE-2009-4022.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0290

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:13497

Oval ID:	oval:org.mitre.oval:def:13497
Title:	USN-888-1 -- bind9 vulnerabilities
Description:	It was discovered that Bind would incorrectly cache bogus NXDOMAIN responses. When DNSSEC validation is in use, a remote attacker could exploit this to cause a denial of service, and possibly poison DNS caches. USN-865-1 provided updated Bind packages to fix a security vulnerability. The upstream security patch to fix CVE-2009-4022 was incomplete and CVE-2010-0290 was assigned to the issue. This update corrects the problem. Original advisory details: Michael Sinatra discovered that Bind did not correctly validate certain records added to its cache. When DNSSEC validation is in use, a remote attacker could exploit this to spoof DNS entries and poison DNS caches. Among other things, this could lead to misdirected email and web traffic.
Family:	unix	Class:	patch
Reference(s):	USN-888-1 CVE-2010-0097 CVE-2009-4022 CVE-2010-0290	Version:	5
Platform(s):	Ubuntu 8.04 Ubuntu 8.10 Ubuntu 9.10 Ubuntu 6.06 Ubuntu 9.04	Product(s):	bind9
Definition Synopsis:
Release section Ubuntu 8.04 is installed AND Architecture section Architecture independent section Installed architecture is all AND bind9-doc DPKG is earlier than 9.4.2.dfsg.P2-2ubuntu0.5 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is lpia AND Packages section dnsutils DPKG is earlier than 9.4.2.dfsg.P2-2ubuntu0.5 AND libbind-dev DPKG is earlier than 9.4.2.dfsg.P2-2ubuntu0.5 AND libisc35 DPKG is earlier than 9.4.2.dfsg.P2-2ubuntu0.5 AND libdns36 DPKG is earlier than 9.4.2.dfsg.P2-2ubuntu0.5 AND libdns35 DPKG is earlier than 9.4.2.dfsg.P2-2ubuntu0.5 AND liblwres30 DPKG is earlier than 9.4.2.dfsg.P2-2ubuntu0.5 AND libbind9-30 DPKG is earlier than 9.4.2.dfsg.P2-2ubuntu0.5 AND lwresd DPKG is earlier than 9.4.2.dfsg.P2-2ubuntu0.5 AND bind9 DPKG is earlier than 9.4.2.dfsg.P2-2ubuntu0.5 AND libisccfg30 DPKG is earlier than 9.4.2.dfsg.P2-2ubuntu0.5 AND libisccc30 DPKG is earlier than 9.4.2.dfsg.P2-2ubuntu0.5 AND bind9-host DPKG is earlier than 9.4.2.dfsg.P2-2ubuntu0.5 OR Release section Ubuntu 8.10 is installed AND Architecture section Architecture independent section Installed architecture is all AND bind9-doc DPKG is earlier than 9.5.0.dfsg.P2-1ubuntu3.5 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is lpia AND Packages section dnsutils DPKG is earlier than 9.5.0.dfsg.P2-1ubuntu3.5 AND libbind-dev DPKG is earlier than 9.5.0.dfsg.P2-1ubuntu3.5 AND libisccc40 DPKG is earlier than 9.5.0.dfsg.P2-1ubuntu3.5 AND libisccfg40 DPKG is earlier than 9.5.0.dfsg.P2-1ubuntu3.5 AND libbind9-40 DPKG is earlier than 9.5.0.dfsg.P2-1ubuntu3.5 AND bind9utils DPKG is earlier than 9.5.0.dfsg.P2-1ubuntu3.5 AND libdns43 DPKG is earlier than 9.5.0.dfsg.P2-1ubuntu3.5 AND liblwres40 DPKG is earlier than 9.5.0.dfsg.P2-1ubuntu3.5 AND lwresd DPKG is earlier than 9.5.0.dfsg.P2-1ubuntu3.5 AND libdns44 DPKG is earlier than 9.5.0.dfsg.P2-1ubuntu3.5 AND libisc44 DPKG is earlier than 9.5.0.dfsg.P2-1ubuntu3.5 AND bind9 DPKG is earlier than 9.5.0.dfsg.P2-1ubuntu3.5 AND bind9-host DPKG is earlier than 9.5.0.dfsg.P2-1ubuntu3.5 OR Release section Ubuntu 9.10 is installed AND Architecture section Architecture independent section Installed architecture is all AND bind9-doc DPKG is earlier than 9.6.1.dfsg.P1-3ubuntu0.3 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is lpia AND Packages section dnsutils DPKG is earlier than 9.6.1.dfsg.P1-3ubuntu0.3 AND libbind-dev DPKG is earlier than 9.6.1.dfsg.P1-3ubuntu0.3 AND bind9 DPKG is earlier than 9.6.1.dfsg.P1-3ubuntu0.3 AND libbind9-50 DPKG is earlier than 9.6.1.dfsg.P1-3ubuntu0.3 AND bind9utils DPKG is earlier than 9.6.1.dfsg.P1-3ubuntu0.3 AND libisc50 DPKG is earlier than 9.6.1.dfsg.P1-3ubuntu0.3 AND liblwres50 DPKG is earlier than 9.6.1.dfsg.P1-3ubuntu0.3 AND lwresd DPKG is earlier than 9.6.1.dfsg.P1-3ubuntu0.3 AND libdns50 DPKG is earlier than 9.6.1.dfsg.P1-3ubuntu0.3 AND libdns53 DPKG is earlier than 9.6.1.dfsg.P1-3ubuntu0.3 AND libisccfg50 DPKG is earlier than 9.6.1.dfsg.P1-3ubuntu0.3 AND libisccc50 DPKG is earlier than 9.6.1.dfsg.P1-3ubuntu0.3 AND bind9-host DPKG is earlier than 9.6.1.dfsg.P1-3ubuntu0.3 OR Release section Ubuntu 6.06 is installed AND Architecture section Architecture independent section Installed architecture is all AND bind9-doc DPKG is earlier than 9.3.2-2ubuntu1.11 OR Architecture depended section Supported architectures section Installed architecture is sparc AND Installed architecture is powerpc AND Installed architecture is amd64 AND Installed architecture is i386 AND Packages section dnsutils DPKG is earlier than 9.3.2-2ubuntu1.11 AND libbind-dev DPKG is earlier than 9.3.2-2ubuntu1.11 AND libdns23 DPKG is earlier than 9.3.2-2ubuntu1.11 AND libisccfg1 DPKG is earlier than 9.3.2-2ubuntu1.11 AND libdns21 DPKG is earlier than 9.3.2-2ubuntu1.11 AND libisc11 DPKG is earlier than 9.3.2-2ubuntu1.11 AND libisccc0 DPKG is earlier than 9.3.2-2ubuntu1.11 AND libbind9-0 DPKG is earlier than 9.3.2-2ubuntu1.11 AND bind9-host DPKG is earlier than 9.3.2-2ubuntu1.11 AND bind9 DPKG is earlier than 9.3.2-2ubuntu1.11 AND liblwres9 DPKG is earlier than 9.3.2-2ubuntu1.11 AND lwresd DPKG is earlier than 9.3.2-2ubuntu1.11 OR Release section Ubuntu 9.04 is installed AND Architecture section Architecture independent section Installed architecture is all AND bind9-doc DPKG is earlier than 9.5.1.dfsg.P2-1ubuntu0.4 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is lpia AND Packages section dnsutils DPKG is earlier than 9.5.1.dfsg.P2-1ubuntu0.4 AND libbind-dev DPKG is earlier than 9.5.1.dfsg.P2-1ubuntu0.4 AND libisccc40 DPKG is earlier than 9.5.1.dfsg.P2-1ubuntu0.4 AND libisccfg40 DPKG is earlier than 9.5.1.dfsg.P2-1ubuntu0.4 AND bind9utils DPKG is earlier than 9.5.1.dfsg.P2-1ubuntu0.4 AND libisc45 DPKG is earlier than 9.5.1.dfsg.P2-1ubuntu0.4 AND liblwres40 DPKG is earlier than 9.5.1.dfsg.P2-1ubuntu0.4 AND lwresd DPKG is earlier than 9.5.1.dfsg.P2-1ubuntu0.4 AND libdns46 DPKG is earlier than 9.5.1.dfsg.P2-1ubuntu0.4 AND libbind9-40 DPKG is earlier than 9.5.1.dfsg.P2-1ubuntu0.4 AND libdns45 DPKG is earlier than 9.5.1.dfsg.P2-1ubuntu0.4 AND bind9 DPKG is earlier than 9.5.1.dfsg.P2-1ubuntu0.4 AND bind9-host DPKG is earlier than 9.5.1.dfsg.P2-1ubuntu0.4

Definition Id: oval:org.mitre.oval:def:6815

Oval ID:	oval:org.mitre.oval:def:6815
Title:	HP-UX Running BIND, Remote Denial of Service (DoS), Unauthorized Disclosure of Information
Description:	Unspecified vulnerability in ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta, with DNSSEC validation enabled and checking disabled (CD), allows remote attackers to conduct DNS cache poisoning attacks by receiving a recursive client query and sending a response that contains (1) CNAME or (2) DNAME records, which do not have the intended validation before caching, aka Bug 20737. NOTE: this vulnerability exists because of an incomplete fix for CVE-2009-4022.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-0290	Version:	6
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02546 HP Release B.11.23 AND filesets tests BindUpgrade.BIND-UPGRADE version is less than C.9.3.2.7.0 AND BindUpgrade.BIND2-UPGRADE version is less than C.9.3.2.7.0 OR Criteria meets HP Security Bulletin HPSBUX02546 HP Release B.11.23 AND filesets tests InternetSrvcs.INETSVCS-INETD is installed AND InternetSrvcs.INETSVCS-RUN is installed AND InternetSrvcs.INETSVCS2-RUN is installed AND NOT Patch PHNE_40339 is installed OR Criteria meets HP Security Bulletin HPSBUX02546 HP Release B.11.11 AND BindUpgrade.BIND-UPGRADE version is less than C.9.3.2.7.0 OR Criteria meets HP Security Bulletin HPSBUX02546 HP Release B.11.11 AND BINDv920.INETSVCS-BIND version is less than B.11.11.01.015

Definition Id: oval:org.mitre.oval:def:7512

Oval ID:	oval:org.mitre.oval:def:7512
Title:	ISC BIND 9 DNSSEC Query Response Additional Section Remote Cache Poisoning Vulnerability
Description:	Unspecified vulnerability in ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta, with DNSSEC validation enabled and checking disabled (CD), allows remote attackers to conduct DNS cache poisoning attacks by receiving a recursive client query and sending a response that contains (1) CNAME or (2) DNAME records, which do not have the intended validation before caching, aka Bug 20737. NOTE: this vulnerability exists because of an incomplete fix for CVE-2009-4022.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-0290	Version:	5
Platform(s):	VMWare ESX Server 4.0	Product(s):
Definition Synopsis:
VMware ESX Server 4.0 is installed AND Patch ESX400-201005408-SG is not installed

Definition Id: oval:org.mitre.oval:def:8884

Oval ID:	oval:org.mitre.oval:def:8884
Title:	Unspecified vulnerability in ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta, with DNSSEC validation enabled and checking disabled (CD), allows remote attackers to conduct DNS cache poisoning attacks by receiving a recursive client query and sending a response that contains (1) CNAME or (2) DNAME records, which do not have the intended validation before caching, aka Bug 20737. NOTE: this vulnerability exists because of an incomplete fix for CVE-2009-4022.
Description:	Unspecified vulnerability in ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta, with DNSSEC validation enabled and checking disabled (CD), allows remote attackers to conduct DNS cache poisoning attacks by receiving a recursive client query and sending a response that contains (1) CNAME or (2) DNAME records, which do not have the intended validation before caching, aka Bug 20737. NOTE: this vulnerability exists because of an incomplete fix for CVE-2009-4022.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-0290	Version:	5
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section bind-utils is earlier than 30:9.3.6-4.P1.el5_4.2 AND bind-libbind-devel is earlier than 30:9.3.6-4.P1.el5_4.2 AND bind-devel is earlier than 30:9.3.6-4.P1.el5_4.2 AND bind-chroot is earlier than 30:9.3.6-4.P1.el5_4.2 AND caching-nameserver is earlier than 30:9.3.6-4.P1.el5_4.2 AND bind-sdb is earlier than 30:9.3.6-4.P1.el5_4.2 AND bind is earlier than 30:9.3.6-4.P1.el5_4.2 AND bind-libs is earlier than 30:9.3.6-4.P1.el5_4.2

CPE : Common Platform Enumeration

Type	Description	Count
Application	Isc Bind cpe:2.3:a:isc:bind:9.7.0:b1:::-:::* cpe:2.3:a:isc:bind:9.6.1:rc1:::-:::* cpe:2.3:a:isc:bind:9.6.1:p2:::-:::* cpe:2.3:a:isc:bind:9.6.1:p1:::-:::* cpe:2.3:a:isc:bind:9.6.1::::-::: cpe:2.3:a:isc:bind:9.6.1:b1:::-:::* cpe:2.3:a:isc:bind:9.6.0:rc1:::-:::* cpe:2.3:a:isc:bind:9.6.0:rc2:::-:::* cpe:2.3:a:isc:bind:9.6.0:p1:::-:::* cpe:2.3:a:isc:bind:9.6.0::::-::: cpe:2.3:a:isc:bind:9.6.0:b1:::-:::* cpe:2.3:a:isc:bind:9.6.0:a1:::-:::* cpe:2.3:a:isc:bind:9.4.3:rc1:::-:::* cpe:2.3:a:isc:bind:9.4.3::::-::: cpe:2.3:a:isc:bind:9.4.3:p2:::-:::* cpe:2.3:a:isc:bind:9.4.3:b1:::-:::* cpe:2.3:a:isc:bind:9.4.3:b3:::-:::* cpe:2.3:a:isc:bind:9.4.3:b2:::-:::* cpe:2.3:a:isc:bind:9.4.3:p3:::-:::* cpe:2.3:a:isc:bind:9.4.3:p1:::-:::* cpe:2.3:a:isc:bind:9.4.3:p5:::-:::* cpe:2.3:a:isc:bind:9.4.3:p4:::-:::* cpe:2.3:a:isc:bind:9.4.2::::-::: cpe:2.3:a:isc:bind:9.4.2:rc1:::-:::* cpe:2.3:a:isc:bind:9.4.2:rc2:::-:::* cpe:2.3:a:isc:bind:9.4.1::::-::: cpe:2.3:a:isc:bind:9.4.0::::-::: cpe:2.3:a:isc:bind:9.4.0:rc1:::-:::* cpe:2.3:a:isc:bind:9.4.0:rc2:::-:::* cpe:2.3:a:isc:bind:9.4.0:a6:::-:::* cpe:2.3:a:isc:bind:9.4.0:a5:::-:::* cpe:2.3:a:isc:bind:9.4.0:b4:::-:::* cpe:2.3:a:isc:bind:9.4.0:b3:::-:::* cpe:2.3:a:isc:bind:9.4.0:b2:::-:::* cpe:2.3:a:isc:bind:9.4.0:b1:::-:::* cpe:2.3:a:isc:bind:9.4.0:a4:::-:::* cpe:2.3:a:isc:bind:9.4.0:a3:::-:::* cpe:2.3:a:isc:bind:9.4.0:a2:::-:::* cpe:2.3:a:isc:bind:9.4.0:a1:::-:::* cpe:2.3:a:isc:bind:9.4::::-::: cpe:2.3:a:isc:bind:9.3.6::::-::: cpe:2.3:a:isc:bind:9.3.6:rc1:::-:::* cpe:2.3:a:isc:bind:9.3.5::::-::: cpe:2.3:a:isc:bind:9.3.5:rc1:::-:::* cpe:2.3:a:isc:bind:9.3.5:rc2:::-:::* cpe:2.3:a:isc:bind:9.3.4::::-::: cpe:2.3:a:isc:bind:9.3.3::::-::: cpe:2.3:a:isc:bind:9.3.3:rc3:::-:::* cpe:2.3:a:isc:bind:9.3.3:rc1:::-:::* cpe:2.3:a:isc:bind:9.3.3:rc2:::-:::* cpe:2.3:a:isc:bind:9.3.2::::-::: cpe:2.3:a:isc:bind:9.3.2:rc1:::-:::* cpe:2.3:a:isc:bind:9.3.1::::-::: cpe:2.3:a:isc:bind:9.3.1:rc1:::-:::* cpe:2.3:a:isc:bind:9.3.1:b2:::-:::* cpe:2.3:a:isc:bind:9.3.0::::-::: cpe:2.3:a:isc:bind:9.3.0:rc1:::-:::* cpe:2.3:a:isc:bind:9.3.0:rc4:::-:::* cpe:2.3:a:isc:bind:9.3.0:rc3:::-:::* cpe:2.3:a:isc:bind:9.3.0:rc2:::-:::* cpe:2.3:a:isc:bind:9.3.0:b4:::-:::* cpe:2.3:a:isc:bind:9.3.0:b3:::-:::* cpe:2.3:a:isc:bind:9.3.0:b2:::-:::* cpe:2.3:a:isc:bind:9.3::::-::: cpe:2.3:a:isc:bind:9.2.9::::-::: cpe:2.3:a:isc:bind:9.2.9:rc1:::-:::* cpe:2.3:a:isc:bind:9.2.8::::-::: cpe:2.3:a:isc:bind:9.2.7::::-::: cpe:2.3:a:isc:bind:9.2.7:rc3:::-:::* cpe:2.3:a:isc:bind:9.2.7:rc1:::-:::* cpe:2.3:a:isc:bind:9.2.7:rc2:::-:::* cpe:2.3:a:isc:bind:9.2.6::::-::: cpe:2.3:a:isc:bind:9.2.6:rc1:::-:::* cpe:2.3:a:isc:bind:9.2.5::::-::: cpe:2.3:a:isc:bind:9.2.5:rc1:::-:::* cpe:2.3:a:isc:bind:9.2.5:b2:::-:::* cpe:2.3:a:isc:bind:9.2.4::::-::: cpe:2.3:a:isc:bind:9.2.4:rc7:::-:::* cpe:2.3:a:isc:bind:9.2.4:rc8:::-:::* cpe:2.3:a:isc:bind:9.2.4:rc2:::-:::* cpe:2.3:a:isc:bind:9.2.4:rc3:::-:::* cpe:2.3:a:isc:bind:9.2.4:rc6:::-:::* cpe:2.3:a:isc:bind:9.2.4:rc5:::-:::* cpe:2.3:a:isc:bind:9.2.4:rc4:::-:::* cpe:2.3:a:isc:bind:9.2.3::::-::: cpe:2.3:a:isc:bind:9.2.3:rc3:::-:::* cpe:2.3:a:isc:bind:9.2.3:rc1:::-:::* cpe:2.3:a:isc:bind:9.2.3:rc4:::-:::* cpe:2.3:a:isc:bind:9.2.3:rc2:::-:::* cpe:2.3:a:isc:bind:9.2.2::::-::: cpe:2.3:a:isc:bind:9.2.2:p3:::-:::* cpe:2.3:a:isc:bind:9.2.2:rc1:::-:::* cpe:2.3:a:isc:bind:9.2.2:p2:::-:::* cpe:2.3:a:isc:bind:9.2.1::::-::: cpe:2.3:a:isc:bind:9.2.1:rc1:::-:::* cpe:2.3:a:isc:bind:9.2.1:rc2:::-:::* cpe:2.3:a:isc:bind:9.2.0::::-::: cpe:2.3:a:isc:bind:9.2.0:rc4:::-:::* cpe:2.3:a:isc:bind:9.2.0:rc9:::-:::* cpe:2.3:a:isc:bind:9.2.0:rc5:::-:::* cpe:2.3:a:isc:bind:9.2.0:rc10:::-:::* cpe:2.3:a:isc:bind:9.2.0:rc3:::-:::* cpe:2.3:a:isc:bind:9.2.0:rc2:::-:::* cpe:2.3:a:isc:bind:9.2.0:rc1:::-:::* cpe:2.3:a:isc:bind:9.2.0:rc7:::-:::* cpe:2.3:a:isc:bind:9.2.0:rc6:::-:::* cpe:2.3:a:isc:bind:9.2.0:rc8:::-:::* cpe:2.3:a:isc:bind:9.2.0:b1:::-:::* cpe:2.3:a:isc:bind:9.2.0:a1:::-:::* cpe:2.3:a:isc:bind:9.2.0:b2:::-:::* cpe:2.3:a:isc:bind:9.2.0:a2:::-:::* cpe:2.3:a:isc:bind:9.2.0:a3:::-:::* cpe:2.3:a:isc:bind:9.2::::-::: cpe:2.3:a:isc:bind:9.10.3:b1:::::: cpe:2.3:a:isc:bind:9.10.3:::::::* cpe:2.3:a:isc:bind:9.10.3:rc1:::::: cpe:2.3:a:isc:bind:9.10.3:p3:::::: cpe:2.3:a:isc:bind:9.10.3:p2:::::: cpe:2.3:a:isc:bind:9.10.3:p1:::::: cpe:2.3:a:isc:bind:9.10.2:p3:::::: cpe:2.3:a:isc:bind:9.10.2:p2:::::: cpe:2.3:a:isc:bind:9.10.2:rc2:::::: cpe:2.3:a:isc:bind:9.10.2:rc1:::::: cpe:2.3:a:isc:bind:9.10.2:p4:::::: cpe:2.3:a:isc:bind:9.10.2:p1:::::: cpe:2.3:a:isc:bind:9.10.2:b1:::::: cpe:2.3:a:isc:bind:9.10.1:rc2:::::: cpe:2.3:a:isc:bind:9.10.1:rc1:::::: cpe:2.3:a:isc:bind:9.10.1:b2:::::: cpe:2.3:a:isc:bind:9.10.1:b1:::::: cpe:2.3:a:isc:bind:9.10.1:p2:::::: cpe:2.3:a:isc:bind:9.10.1:p1:::::: cpe:2.3:a:isc:bind:9.10.1:::::::* cpe:2.3:a:isc:bind:9.10.0:rc1:::::: cpe:2.3:a:isc:bind:9.10.0:p2:::::: cpe:2.3:a:isc:bind:9.10.0:b1:::::: cpe:2.3:a:isc:bind:9.10.0:a2:::::: cpe:2.3:a:isc:bind:9.10.0:p1:::::: cpe:2.3:a:isc:bind:9.10.0:b2:::::: cpe:2.3:a:isc:bind:9.10.0:rc2:::::: cpe:2.3:a:isc:bind:9.10.0:a1:::::: cpe:2.3:a:isc:bind:9.10.0:::::::* cpe:2.3:a:isc:bind:9.1.3::::-::: cpe:2.3:a:isc:bind:9.1.3:rc1:::-:::* cpe:2.3:a:isc:bind:9.1.3:rc2:::-:::* cpe:2.3:a:isc:bind:9.1.3:rc3:::-:::* cpe:2.3:a:isc:bind:9.1.2::::-::: cpe:2.3:a:isc:bind:9.1.2:rc1:::-:::* cpe:2.3:a:isc:bind:9.1.1::::-::: cpe:2.3:a:isc:bind:9.1.1:rc6:::-:::* cpe:2.3:a:isc:bind:9.1.1:rc7:::-:::* cpe:2.3:a:isc:bind:9.1.1:rc3:::-:::* cpe:2.3:a:isc:bind:9.1.1:rc2:::-:::* cpe:2.3:a:isc:bind:9.1.1:rc4:::-:::* cpe:2.3:a:isc:bind:9.1.1:rc5:::-:::* cpe:2.3:a:isc:bind:9.1.1:rc1:::-:::* cpe:2.3:a:isc:bind:9.1.0:rc1:::-:::* cpe:2.3:a:isc:bind:9.1::::-::: cpe:2.3:a:isc:bind:9.0.1::::-::: cpe:2.3:a:isc:bind:9.0.1:rc2:::-:::* cpe:2.3:a:isc:bind:9.0.1:rc1:::-:::* cpe:2.3:a:isc:bind:9.0.0:rc4:::-:::* cpe:2.3:a:isc:bind:9.0.0:rc5:::-:::* cpe:2.3:a:isc:bind:9.0.0:rc2:::-:::* cpe:2.3:a:isc:bind:9.0.0:rc6:::-:::* cpe:2.3:a:isc:bind:9.0.0:rc1:::-:::* cpe:2.3:a:isc:bind:9.0.0:rc3:::-:::* cpe:2.3:a:isc:bind:9.0::::-:::	168

OpenVAS Exploits

Date	Description
2012-04-16	Name : VMSA-2010-0009: ESXi utilities and ESX Service Console third party updates File : nvt/gb_VMSA-2010-0009.nasl
2011-08-09	Name : CentOS Update for bind CESA-2010:0062 centos5 i386 File : nvt/gb_CESA-2010_0062_bind_centos5_i386.nasl
2011-03-09	Name : Gentoo Security Advisory GLSA 201006-11 (BIND) File : nvt/glsa_201006_11.nasl
2010-10-01	Name : HP-UX Update for BIND HPSBUX02546 File : nvt/gb_hp_ux_HPSBUX02546.nasl
2010-07-06	Name : Debian Security Advisory DSA 2054-2 (bind9) File : nvt/deb_2054_2.nasl
2010-06-10	Name : Debian Security Advisory DSA 2054-1 (bind9) File : nvt/deb_2054_1.nasl
2010-01-29	Name : SuSE Update for acroread SUSE-SA:2010:008 File : nvt/gb_suse_2010_008.nasl
2010-01-25	Name : RedHat Update for bind RHSA-2010:0062-02 File : nvt/gb_RHSA-2010_0062-02_bind.nasl
2010-01-22	Name : Mandriva Update for bind MDVSA-2010:021 (bind) File : nvt/gb_mandriva_MDVSA_2010_021.nasl
2010-01-22	Name : Ubuntu Update for bind9 vulnerabilities USN-888-1 File : nvt/gb_ubuntu_USN_888_1.nasl
2010-01-20	Name : ISC BIND 9 DNSSEC Bogus NXDOMAIN Response Remote Cache Poisoning Vulnerability File : nvt/bind_37865.nasl

Open Source Vulnerability Database (OSVDB)

Id	Description
62007	ISC BIND Recursive Client Query CNAME / DNAME Response DNS Cache Poisoning

Nessus® Vulnerability Scanner

Date	Description
2017-04-21	Name : The remote OracleVM host is missing one or more security updates. File : oraclevm_OVMSA-2017-0066.nasl - Type : ACT_GATHER_INFO
2016-03-08	Name : The remote VMware ESX / ESXi host is missing a security-related patch. File : vmware_VMSA-2010-0009_remote.nasl - Type : ACT_GATHER_INFO
2014-10-28	Name : The remote device is missing a vendor-supplied security patch. File : f5_bigip_SOL15748.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2010-0062.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20100120_bind_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2010-06-08	Name : The remote Debian host is missing a security-related update. File : debian_DSA-2054.nasl - Type : ACT_GATHER_INFO
2010-06-07	Name : The remote HP-UX host is missing a security-related patch. File : hpux_PHNE_40339.nasl - Type : ACT_GATHER_INFO
2010-06-02	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201006-11.nasl - Type : ACT_GATHER_INFO
2010-06-01	Name : The remote VMware ESXi / ESX host is missing one or more security-related pat... File : vmware_VMSA-2010-0009.nasl - Type : ACT_GATHER_INFO
2010-01-26	Name : The remote openSUSE host is missing a security update. File : suse_11_0_bind-100121.nasl - Type : ACT_GATHER_INFO
2010-01-26	Name : The remote openSUSE host is missing a security update. File : suse_11_1_bind-100121.nasl - Type : ACT_GATHER_INFO
2010-01-26	Name : The remote openSUSE host is missing a security update. File : suse_11_2_bind-100121.nasl - Type : ACT_GATHER_INFO
2010-01-26	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_bind-100121.nasl - Type : ACT_GATHER_INFO
2010-01-21	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0062.nasl - Type : ACT_GATHER_INFO
2010-01-21	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2010-021.nasl - Type : ACT_GATHER_INFO
2010-01-21	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-888-1.nasl - Type : ACT_GATHER_INFO
2010-01-21	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2010-0062.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html
http://marc.info/?l=oss-security&m=126393609503704&w=2
http://marc.info/?l=oss-security&m=126399602810086&w=2
http://secunia.com/advisories/38219
http://secunia.com/advisories/38240
http://secunia.com/advisories/40086
http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0018
http://www.debian.org/security/2010/dsa-2054
http://www.mandriva.com/security/advisories?name=MDVSA-2010:021
http://www.ubuntu.com/usn/USN-888-1
http://www.vupen.com/english/advisories/2010/0176
http://www.vupen.com/english/advisories/2010/0622
http://www.vupen.com/english/advisories/2010/1352
https://bugzilla.redhat.com/show_bug.cgi?id=554851
https://bugzilla.redhat.com/show_bug.cgi?id=557121
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova...
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova...
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova...
https://rhn.redhat.com/errata/RHSA-2010-0062.html
https://www.isc.org/advisories/CVE-2009-4022v6

Source	Url

Alert History

If you want to see full details history, please login or register.

Date	Informations
2024-11-28 23:09:29	Multiple Updates
2024-11-28 12:21:01	Multiple Updates
2024-08-02 12:13:02	Multiple Updates
2024-08-02 01:03:32	Multiple Updates
2024-02-02 01:12:33	Multiple Updates
2024-02-01 12:03:28	Multiple Updates
2023-11-07 21:47:38	Multiple Updates
2023-09-05 12:11:46	Multiple Updates
2023-09-05 01:03:19	Multiple Updates
2023-09-02 12:11:48	Multiple Updates
2023-09-02 01:03:21	Multiple Updates
2023-08-12 12:13:59	Multiple Updates
2023-08-12 01:03:21	Multiple Updates
2023-08-11 12:11:52	Multiple Updates
2023-08-11 01:03:29	Multiple Updates
2023-08-06 12:11:24	Multiple Updates
2023-08-06 01:03:23	Multiple Updates
2023-08-04 12:11:29	Multiple Updates
2023-08-04 01:03:24	Multiple Updates
2023-07-14 12:11:26	Multiple Updates
2023-07-14 01:03:22	Multiple Updates
2023-03-29 01:13:07	Multiple Updates
2023-03-28 12:03:28	Multiple Updates
2023-02-13 09:29:13	Multiple Updates
2022-10-11 12:10:11	Multiple Updates
2022-10-11 01:03:10	Multiple Updates
2021-05-04 12:11:04	Multiple Updates
2021-04-22 01:11:35	Multiple Updates
2020-05-23 00:25:10	Multiple Updates
2017-09-19 09:23:37	Multiple Updates
2017-04-22 13:25:52	Multiple Updates
2016-04-04 21:25:26	Multiple Updates
2016-03-09 13:25:54	Multiple Updates
2014-10-29 13:24:29	Multiple Updates
2014-02-17 10:53:33	Multiple Updates
2013-05-10 23:17:01	Multiple Updates

Global Informations

Type	Count
Oval ID(s)	4
CPE ID(s)	168
Sources(s)	20
osvdb(s)	1
Openvas Exploit(s)	11
Nessus® Exploit(s)	17

	Related
10	VMSA-2010-0009
7.6	HPSBUX02546 SSR...
7.6	GLSA-201006-11
7.6	DSA-2054
4.3	USN-888-1
4.3	RHSA-2010:0062
4.3	MDVSA-2010:021
2.6	CVE-2009-4022
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 8 more Alert(s)

4 - CVE-2010-0290

Executive Summary

Security-Database Scoring CVSS v3

Security-Database Scoring CVSS v2

Detail

Original Source

OVAL Definitions

CPE : Common Platform Enumeration

OpenVAS Exploits

Open Source Vulnerability Database (OSVDB)

Nessus® Vulnerability Scanner

Sources (Detail)

Alert History

Global Informations

Open Standards

Other Databases

COMPANY

STANDARDS

RECENT POSTS

MENU