CVE-2002-2211: Medium severity ISC BIND vulnerability

Published Dec 31, 2002

Updated

BIND 4 and BIND 8, when resolving recursive DNS queries for arbitrary hosts, allows remote attackers to conduct DNS cache poisoning via a birthday attack that uses a large number of open queries for the same resource record (RR) combined with spoofed responses, which increases the possibility of successfully spoofing a response in a way that is more efficient than brute force methods.

Affected Software

31 affected components

ISC BIND=8.2.2-p7

ISC BIND=8.2

ISC BIND=4.9.5-p1

ISC BIND=4.9.4

ISC BIND=8.2.1

ISC BIND=8.2.2-p1

ISC BIND=8.2.5

ISC BIND=8.3.1

ISC BIND=8.3.2

ISC BIND=8.2.2-p4

ISC BIND=4.9.8

ISC BIND=8.2.2-p2

ISC BIND=8.3.4

ISC BIND=4.9.6

ISC BIND=8.2.7

ISC BIND=8.2.2

ISC BIND=8.2.4

ISC BIND=8.2.2-p6

ISC BIND=4.9.10

ISC BIND=4.9

ISC BIND=8.2.6

ISC BIND=4.9.3

ISC BIND=4.9.7

ISC BIND=8.2.2-p5

ISC BIND=8.3.0

ISC BIND=8.2.2-p3

ISC BIND=8.3.3

ISC BIND=4.9.9

ISC BIND=4.9.5

ISC BIND=4.9.2

ISC BIND=8.2.3

Remediation

Patch Available

http://www.rnp.br/cais/alertas/2002/cais-ALR-19112002a.html

Event History

Dec 31, 2002

CVE Published

05:00 AM

Data Sourced

via NVD·05:00 AM

RemedyDescriptionSeverityAffected Software

May 23, 2006

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2002-2211?

CVE-2002-2211 has a medium severity rating due to its potential for DNS cache poisoning.

How do I fix CVE-2002-2211?

To fix CVE-2002-2211, upgrade to a non-vulnerable version of BIND, specifically versions later than the affected ones.

What versions of BIND are affected by CVE-2002-2211?

CVE-2002-2211 affects BIND versions 4.9.x and 8.2.x.

How can CVE-2002-2211 be exploited?

CVE-2002-2211 can be exploited by attackers performing a birthday attack with a large number of open queries and spoofed responses.

What impact does CVE-2002-2211 have on DNS servers?

The impact of CVE-2002-2211 on DNS servers can lead to unauthorized cache entries and possible redirection of users to malicious sites.