CVE-2002-2213: Medium severity isc bind vulnerability

Published Dec 31, 2002

Updated

The DNS resolver in unspecified versions of Infoblox DNS One, when resolving recursive DNS queries for arbitrary hosts, allows remote attackers to conduct DNS cache poisoning via a birthday attack that uses a large number of open queries for the same resource record (RR) combined with spoofed responses, which increases the possibility of successfully spoofing a response in a way that is more efficient than brute force methods.

Affected Software

32 affected components

ISC BIND=8.2.2-p7

ISC BIND=8.2

ISC BIND=4.9.5-p1

ISC BIND=4.9.4

ISC BIND=8.2.1

ISC BIND=8.2.2-p1

ISC BIND=8.2.5

ISC BIND=8.3.1

ISC BIND=8.3.2

ISC BIND=8.2.2-p4

Infoblox DNS One

ISC BIND=4.9.8

ISC BIND=8.2.2-p2

ISC BIND=8.3.4

ISC BIND=4.9.6

ISC BIND=8.2.7

ISC BIND=8.2.2

ISC BIND=8.2.4

ISC BIND=8.2.2-p6

ISC BIND=4.9.10

ISC BIND=4.9

ISC BIND=8.2.6

ISC BIND=4.9.3

ISC BIND=4.9.7

ISC BIND=8.2.2-p5

ISC BIND=8.3.0

ISC BIND=8.2.2-p3

ISC BIND=8.3.3

ISC BIND=4.9.9

ISC BIND=4.9.5

ISC BIND=4.9.2

ISC BIND=8.2.3

Remediation

Patch Available

http://www.rnp.br/cais/alertas/2002/cais-ALR-19112002a.html

Event History

Dec 31, 2002

CVE Published

05:00 AM

Data Sourced

via NVD·05:00 AM

RemedyDescriptionSeverityAffected Software

May 23, 2006

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2002-2213?

CVE-2002-2213 has a high severity level, as it allows remote attackers to perform DNS cache poisoning.

How do I fix CVE-2002-2213?

To fix CVE-2002-2213, upgrade to the latest version of ISC BIND or Infoblox DNS One that addresses this vulnerability.

What types of attacks can be conducted using CVE-2002-2213?

CVE-2002-2213 enables attackers to conduct DNS cache poisoning attacks via a birthday attack.

Which versions of software are affected by CVE-2002-2213?

CVE-2002-2213 affects various versions of ISC BIND, specifically versions 4.9.x and 8.2.x, as well as unspecified versions of Infoblox DNS One.

How does CVE-2002-2213 allow for DNS cache poisoning?

CVE-2002-2213 facilitates DNS cache poisoning by exploiting the use of a large number of open queries for the same resource record combined with spoofed responses.