Detections
Analytics
ISC BIND 9 EVP_VerifyFinal() / DSA_do_verify() SSL/TLS Signature Validation Weakness
medium Nessus Plugin ID 38735
Language:
Synopsis
The remote name server is affected by a signature validation weakness.Description
According to its version number, the remote installation of BIND does not properly check the return value from the OpenSSL library functions 'EVP_VerifyFinal()' and 'DSA_do_verify()'. A remote attacker may be able to exploit this weakness to spoof answers returned from zones for signature checks on DSA and ECDSA keys used with SSL / TLS.Solution
Upgrade to BIND 9.3.6-P1 / 9.4.3-P1 / 9.5.1-P1 / 9.6.0-P1 or later.See Also
Plugin Details
Severity: Medium
ID: 38735
File Name: bind_sig_return_checks.nasl
Version: 1.18
Type: remote
Family: DNS
Published: 5/12/2009
Updated: 6/27/2018
Configuration: Enable paranoid mode
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.8
CVSS v2
Risk Factor: Medium
Base Score: 5
Temporal Score: 3.7
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N
Vulnerability Information
CPE: cpe:/a:isc:bind
Required KB Items: Settings/ParanoidReport, bind/version, DNSSEC/udp/53
Exploit Ease: No known exploits are available
Reference Information
CVE: CVE-2009-0025
BID: 33151