Buffer overflow in transaction signature (TSIG) handling code in BIND 8 allows remote attackers to gain root privileges.

BIND 8 suffered from several buffer overflows. It is possible to construct an inverse query that allows the stack to be read remotely exposing environment variables. CERT has disclosed information about these issues. A new upstream version fixes this. Due to the complexity of BIND we have decided to make an exception to our rule by releasing the new upstream source to our stable distribution. We recommend you upgrade your bind packages immediately.

The remote BIND server is vulnerable to various buffer overflows which may allow an attacker to gain a root shell on this host.

The remote BIND server, according to its version number, is affected by various buffer overflow vulnerabilities that may allow an attacker to execute arbitrary code on the remote host.

ID	Name	Product	Family	Type	Severity
14863	Debian DSA-026-1 : bind - buffer overflows and information leak	Nessus	Debian Local Security Checks	Local	critical
1005	ISC BIND < 4.9.2 Multiple Remote Vulnerabilities (deprecated)	Nessus Network Monitor	DNS Servers		critical
1004	ISC BIND < 8.2.3 Multiple Remote Vulnerabilities (deprecated)	Nessus Network Monitor	DNS Servers		critical
10605	ISC BIND < 4.9.8 / 8.2.3 Multiple Remote Overflows	Nessus	DNS	Remote	critical

Detections

Analytics

CVE-2001-0010

critical

Tenable Plugins

critical

critical

critical

critical