The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2020-0021 for details.

Vulnerability in the Solaris component of Oracle Sun Products Suite (subcomponent: Bind/Postinstall script for Bind package). The supported version that is affected is 10. Very difficult to exploit vulnerability requiring logon to Operating System plus additional login/authentication to component or subcomponent. Successful attack of this vulnerability can escalate attacker privileges resulting in unauthorized Operating System takeover including arbitrary code execution.

The DNS query id generation code in BIND9 is vulnerable to cryptographic analysis which provides a 1-in-8 change of guessing the next query ID for 50% of the query IDs, which could be used by a remote attacker to perform cache poisoning by an attacker (CVE-2007-2926).

As well, in BIND9 9.4.x, the default ACLs were note being correctly set, which could allow anyone to make recursive queries and/or query the cache contents (CVE-2007-2925).

This update provides packages which are patched to prevent these issues.

New bind packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, and 12.0 to fix security issues. The first issue which allows remote attackers to make recursive queries only affects Slackware 12.0. More details about this issue may be found in the Common Vulnerabilities and Exposures (CVE) database:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2925 The second issue is the discovery that BIND9's query IDs are cryptographically weak. This issue affects the versions of BIND9 in all supported Slackware versions. More details about this issue may be found in the Common Vulnerabilities and Exposures (CVE) database:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2926

A flaw was discovered in Bind's sequence number generator. A remote attacker could calculate future sequence numbers and send forged DNS query responses. This could lead to client connections being directed to attacker-controlled hosts, resulting in credential theft and other attacks.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

s700_800 11.23 Bind 9.2.0 components : 

A potential vulnerability has been identified with HP-UX running BIND.
The vulnerability could be exploited remotely to cause DNS cache poisoning.

ID	Name	Product	Family	Published	Updated	Severity
137170	OracleVM 3.3 / 3.4 : bind (OVMSA-2020-0021)	Nessus	OracleVM Local Security Checks	6/5/2020	3/7/2024	medium
129874	Solaris 10 (x86) : 119784-43	Nessus	Solaris Local Security Checks	10/15/2019	1/7/2020	medium
25795	Mandrake Linux Security Advisory : bind (MDKSA-2007:149)	Nessus	Mandriva Local Security Checks	7/27/2007	1/6/2021	medium
107333	Solaris 10 (sparc) : 119783-29	Nessus	Solaris Local Security Checks	3/12/2018	1/14/2021	medium
107835	Solaris 10 (x86) : 119784-25	Nessus	Solaris Local Security Checks	3/12/2018	1/14/2021	medium
107842	Solaris 10 (x86) : 119784-37	Nessus	Solaris Local Security Checks	3/12/2018	1/14/2021	medium
54868	Slackware 10.0 / 10.1 / 10.2 / 11.0 / 12.0 / 8.1 / 9.0 / 9.1 : bind (SSA:2007-207-01)	Nessus	Slackware Local Security Checks	5/28/2011	1/14/2021	medium
107839	Solaris 10 (x86) : 119784-32	Nessus	Solaris Local Security Checks	3/12/2018	1/14/2021	medium
126726	Solaris 10 (x86) : 119784-42	Nessus	Solaris Local Security Checks	7/16/2019	1/8/2020	medium
172380	Solaris 10 (sparc) : 119783-50	Nessus	Solaris Local Security Checks	3/9/2023	12/21/2023	high
28093	Ubuntu 6.06 LTS / 6.10 / 7.04 : bind9 vulnerability (USN-491-1)	Nessus	Ubuntu Local Security Checks	11/10/2007	1/19/2021	medium
26139	HP-UX PHNE_36973 : HP-UX Running BIND, Remote DNS Cache Poisoning (HPSBUX02251 SSRT071449 rev.3)	Nessus	HP-UX Local Security Checks	9/25/2007	1/11/2021	medium

Detections

Analytics

Plugins Search

medium

medium

medium

medium

medium

medium

medium

medium

medium

high

medium

medium