ISC BIND 9 for Windows UDP Client Handler Remote DoS

Medium Nessus Plugin ID 34245

Synopsis

The remote name server is affected by a denial of service vulnerability.

Description

According to its version number, the remote installation of BIND suffers from a vulnerability in which the UDP client handler can be shutdown, which in turn causes the server to stop responding to UDP queries.

Note that this issue only exists in the Windows code of BIND 9.5.0-P2-W1 / 9.4.2-P2-W1 / 9.3.5-P2-W1.

Solution

Upgrade to BIND 9.5.0-P2-W2 / 9.4.2-P2-W2 / 9.3.5-P2-W2 or later.

See Also

https://marc.info/?l=bind-users&m=122063620115891&w=2

https://marc.info/?l=bind-users&m=122169697502216&w=2

https://marc.info/?l=bind-announce&m=122180376630150&w=2

https://marc.info/?l=bind-announce&m=122180244228378&w=2

https://marc.info/?l=bind-announce&m=122180244228376&w=2

Plugin Details

Severity: Medium

ID: 34245

File Name: bind_9_5_0_p2_w2.nasl

Version: 1.15

Type: remote

Family: DNS

Published: 2008/09/20

Updated: 2018/11/15

Dependencies: 10028, 11936

Risk Information

Risk Factor: Medium

CVSS v2.0

Base Score: 5

Temporal Score: 3.7

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P

Temporal Vector: CVSS2#E:U/RL:OF/RC:C

Vulnerability Information

CPE: cpe:/a:isc:bind

Required KB Items: bind/version

Exploit Available: false

Exploit Ease: No known exploits are available

Reference Information

CVE: CVE-2008-4163

BID: 31252

CWE: 20