CVE-2000-0888: Medium severity ISC BIND vulnerability
Published Dec 19, 2000
·Updated
named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by sending an SRV record to the server, aka the "srv bug."
Affected Software
11 affected components
ISC BIND=8.2.1
ISC BIND=8.2.2-p1
ISC BIND=8.2.2-p4
ISC BIND=8.2.2-p2
ISC BIND=8.2.2-p6
ISC BIND=8.2.2-p5
ISC BIND=8.2.2-p3
ISC BIND=8.2-p1
ISC BIND=8.2
ISC BIND=8.2.2
Debian Debian Linux=2.2
Event History
Dec 19, 2000
CVE Published
05:00 AM
Jan 22, 2001
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2000-0888?
CVE-2000-0888 is associated with a denial of service vulnerability in BIND 8.2 through 8.2.2-P6 that allows remote attackers to disrupt service.
2
How do I fix CVE-2000-0888?
To mitigate CVE-2000-0888, upgrade to BIND version 8.2.2-P7 or later.
3
Which versions of BIND are affected by CVE-2000-0888?
CVE-2000-0888 affects BIND versions 8.2 through 8.2.2-P6.
4
Can CVE-2000-0888 be exploited remotely?
Yes, CVE-2000-0888 can be exploited remotely by sending a specially crafted SRV record.
5
What impact does CVE-2000-0888 have on affected systems?
CVE-2000-0888 can lead to a denial of service, making the DNS server unresponsive.