First published: Mon Feb 12 2001(Updated: )
Buffer overflow in nslookupComplain function in BIND 4 allows remote attackers to gain root privileges.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
BIND 9 | =4.9.3 | |
BIND 9 | =4.9.5 | |
BIND 9 | =4.9.5-p1 | |
BIND 9 | =4.9.6 | |
BIND 9 | =4.9.7 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2001-0011 is considered a critical vulnerability due to the potential for remote attackers to gain root privileges.
To fix CVE-2001-0011, update BIND to a patched version that resolves the buffer overflow issue.
CVE-2001-0011 affects BIND versions 4.9.3, 4.9.5, 4.9.6, and 4.9.7.
Yes, CVE-2001-0011 can be exploited remotely by attackers to execute arbitrary code.
The nslookupComplain function in BIND is responsible for handling certain name resolution queries, and its buffer overflow vulnerability can lead to system compromise.