CVE-2003-0914: Medium severity ISC BIND vulnerability
Published Dec 2, 2003
·Updated
ISC BIND 8.3.x before 8.3.7, and 8.4.x before 8.4.3, allows remote attackers to poison the cache via a malicious name server that returns negative responses with a large TTL (time-to-live) value.
Affected Software
58 affected components
ISC BIND=8.4.1
ISC BIND=8.2.5
ISC BIND=8.3.1
ISC BIND=8.3.2
Nixu Namesurfer=suite_3.0.1
ISC BIND=8.3.4
ISC BIND=8.2.7
ISC BIND=8.2.4
ISC BIND=8.2.6
ISC BIND=8.2.3
ISC BIND=8.3.3
ISC BIND=8.3.5
ISC BIND=8.3.0
Nixu Namesurfer=standard_3.0.1
ISC BIND=8.3.6
ISC BIND=8.4
NetBSD NetBSD=1.6
HP HP-UX=11.11
Compaq Tru64=5.1_pk3_bl17
Compaq Tru64=5.1_pk4_bl18
NetBSD NetBSD=current
NetBSD NetBSD=1.6.1
Compaq Tru64=5.1b_pk1_bl1
Sun SunOS=5.7
Compaq Tru64=4.0f_pk6_bl17
Compaq Tru64=5.1a_pk3_bl3
Compaq Tru64=5.1a_pk4_bl21
Sun Solaris=9.0
Sun Solaris=9.0
Compaq Tru64=4.0f
Compaq Tru64=5.1_pk5_bl19
FreeBSD FreeBSD=4.7
FreeBSD FreeBSD=4.8
SCO UnixWare=7.1.1
Compaq Tru64=4.0g
Compaq Tru64=4.0g_pk3_bl17
FreeBSD FreeBSD=4.4
FreeBSD FreeBSD=4.5
Sun SunOS=5.8
Compaq Tru64=4.0f_pk8_bl22
Compaq Tru64=5.1_pk6_bl20
HP HP-UX=11.00
Sun Solaris=7.0
Compaq Tru64=5.1
FreeBSD FreeBSD=4.6
FreeBSD FreeBSD=4.6.2
Compaq Tru64=5.1a_pk5_bl23
Compaq Tru64=5.1b
Compaq Tru64=4.0g_pk4_bl22
Compaq Tru64=5.1a_pk1_bl1
Compaq Tru64=5.1a_pk2_bl2
IBM AIX=5.1l
Sun Solaris=8.0
Compaq Tru64=4.0f_pk7_bl18
Compaq Tru64=5.1a
Compaq Tru64=5.1b_pk2_bl22
FreeBSD FreeBSD=4.9
FreeBSD FreeBSD=5.0
Remediation
Patch Available
Patch Available
Event History
Dec 2, 2003
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Dec 15, 2003
Data Sourced
via NVD·05:00 AM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2003-0914?
The severity of CVE-2003-0914 is considered high due to its potential for remote cache poisoning attacks.
2
How do I fix CVE-2003-0914?
To fix CVE-2003-0914, upgrade to ISC BIND version 8.3.7 or higher, or 8.4.3 or higher.
3
What systems are affected by CVE-2003-0914?
CVE-2003-0914 affects various versions of ISC BIND 8.3.x and 8.4.x prior to their respective patched versions.
4
What type of attack does CVE-2003-0914 facilitate?
CVE-2003-0914 facilitates remote cache poisoning attacks through malicious name server responses.
5
When was CVE-2003-0914 disclosed?
CVE-2003-0914 was disclosed in November 2003.