First published: Tue Dec 19 2000(Updated: )
named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by sending an SRV record to the server, aka the "srv bug."
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
ISC BIND | =8.2 | |
ISC BIND | =8.2-p1 | |
ISC BIND | =8.2.1 | |
ISC BIND | =8.2.2 | |
ISC BIND | =8.2.2-p1 | |
ISC BIND | =8.2.2-p2 | |
ISC BIND | =8.2.2-p3 | |
ISC BIND | =8.2.2-p4 | |
ISC BIND | =8.2.2-p5 | |
ISC BIND | =8.2.2-p6 | |
Debian Debian Linux | =2.2 | |
Debian | =2.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2000-0888 is associated with a denial of service vulnerability in BIND 8.2 through 8.2.2-P6 that allows remote attackers to disrupt service.
To mitigate CVE-2000-0888, upgrade to BIND version 8.2.2-P7 or later.
CVE-2000-0888 affects BIND versions 8.2 through 8.2.2-P6.
Yes, CVE-2000-0888 can be exploited remotely by sending a specially crafted SRV record.
CVE-2000-0888 can lead to a denial of service, making the DNS server unresponsive.