CVE-2009-0265
First published: Mon Jan 26 2009(Updated: )
Internet Systems Consortium (ISC) BIND 9.6.0 and earlier does not properly check the return value from the OpenSSL EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077 and CVE-2009-0025.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| ISC BIND | =8.2.2-p7 | |
| ISC BIND | =8.2 | |
| ISC BIND | =8.4.1 | |
| ISC BIND | =9.1.1 | |
| ISC BIND | =8.4.7 | |
| ISC BIND | =4.9.5-p1 | |
| ISC BIND | =8.1 | |
| ISC BIND | =9.1.3 | |
| ISC BIND | =4.9.4 | |
| ISC BIND | =8.2.1 | |
| ISC BIND | =8.2.2-p1 | |
| ISC BIND | =8.2.5 | |
| ISC BIND | =8.3.1 | |
| ISC BIND | =9.2 | |
| ISC BIND | =8.3.2 | |
| ISC BIND | =8.2.2-p4 | |
| ISC BIND | =9.3 | |
| ISC BIND | =9.5.1-rc2 | |
| ISC BIND | =4.9.8 | |
| ISC BIND | =9.2.5 | |
| ISC BIND | =8.2.2-p2 | |
| ISC BIND | =9.3.2 | |
| ISC BIND | =9.5.0-rc1 | |
| ISC BIND | =9.2.2 | |
| ISC BIND | =9.4.1 | |
| ISC BIND | =8.3.4 | |
| ISC BIND | =9.3.0 | |
| ISC BIND | =4.9.6 | |
| ISC BIND | =8.4.5 | |
| ISC BIND | =8.2.7 | |
| ISC BIND | =8.4.4 | |
| ISC BIND | =9.6.0-p1 | |
| ISC BIND | =8.1.2 | |
| ISC BIND | =8.2.2 | |
| ISC BIND | =8.2.4 | |
| ISC BIND | =9.2.7 | |
| ISC BIND | =9.4 | |
| ISC BIND | =9.2.4 | |
| ISC BIND | =9.2.1 | |
| ISC BIND | =9.1.2 | |
| ISC BIND | =9.5.0 | |
| ISC BIND | =9.3.5-p2-w1-windows | |
| ISC BIND | =9.4.2 | |
| ISC BIND | =9.3.1 | |
| ISC BIND | =4 | |
| ISC BIND | =8.2.2-p6 | |
| ISC BIND | =4.9.10 | |
| ISC BIND | =4.9 | |
| ISC BIND | =9.1 | |
| ISC BIND | =8.2.6 | |
| ISC BIND | =9.2.2-p3 | |
| ISC BIND | =9.6.0-rc2 | |
| ISC BIND | =8.3.5 | |
| ISC BIND | =9.4.3 | |
| ISC BIND | =4.9.3 | |
| ISC BIND | =4.9.7 | |
| ISC BIND | =8.2.2-p5 | |
| ISC BIND | <=9.6.0 | |
| ISC BIND | =8 | |
| ISC BIND | =8.3.0 | |
| ISC BIND | =9.3.3 | |
| ISC BIND | =9.4.0-rc1 | |
| ISC BIND | =9.4.0 | |
| ISC BIND | =8.2.2-p3 | |
| ISC BIND | =9.2.3 | |
| ISC BIND | =9.6.0-rc1 | |
| ISC BIND | =8.3.3 | |
| ISC BIND | =9.2.0 | |
| ISC BIND | =9.2.9 | |
| ISC BIND | =9.4.3-rc1 | |
| ISC BIND | =9.0.1 | |
| ISC BIND | =9.5.1-rc1 | |
| ISC BIND | =9.0 | |
| ISC BIND | =4.9.9 | |
| ISC BIND | =8.2-p1 | |
| ISC BIND | =8.3.6 | |
| ISC BIND | =8.4 | |
| ISC BIND | =9.2.6 | |
| ISC BIND | =4.9.5 | |
| ISC BIND | =9.5.1 | |
| ISC BIND | =8.1.1 | |
| ISC BIND | =4.9.2 | |
| ISC BIND | =8.2.3 | |
| ISC BIND | =9.6.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://www.isc.org/node/373
- http://groups.google.com/group/comp.protocols.dns.bind/browse_thread/thread/49ef622c8329fd33
- http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.540362
- http://secunia.com/advisories/33559
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:037
- http://www.vupen.com/english/advisories/2009/0043
- collector/nvd-historical
- collector/nvd-index
- agent/references
- agent/type
- agent/first-publish-date
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/author
- agent/remedy
- agent/weakness
- agent/severity
- agent/last-modified-date
- agent/tags
- agent/description
- agent/event
- vendor/isc
- canonical/isc bind
- version/isc bind/8.2.2-p7
- version/isc bind/8.2
- version/isc bind/8.4.1
- version/isc bind/9.1.1
- version/isc bind/8.4.7
- version/isc bind/4.9.5-p1
- version/isc bind/8.1
- version/isc bind/9.1.3
- version/isc bind/4.9.4
- version/isc bind/8.2.1
- version/isc bind/8.2.2-p1
- version/isc bind/8.2.5
- version/isc bind/8.3.1
- version/isc bind/9.2
- version/isc bind/8.3.2
- version/isc bind/8.2.2-p4
- version/isc bind/9.3
- version/isc bind/9.5.1-rc2
- version/isc bind/4.9.8
- version/isc bind/9.2.5
- version/isc bind/8.2.2-p2
- version/isc bind/9.3.2
- version/isc bind/9.5.0-rc1
- version/isc bind/9.2.2
- version/isc bind/9.4.1
- version/isc bind/8.3.4
- version/isc bind/9.3.0
- version/isc bind/4.9.6
- version/isc bind/8.4.5
- version/isc bind/8.2.7
- version/isc bind/8.4.4
- version/isc bind/9.6.0-p1
- version/isc bind/8.1.2
- version/isc bind/8.2.2
- version/isc bind/8.2.4
- version/isc bind/9.2.7
- version/isc bind/9.4
- version/isc bind/9.2.4
- version/isc bind/9.2.1
- version/isc bind/9.1.2
- version/isc bind/9.5.0
- version/isc bind/9.3.5-p2-w1-windows
- version/isc bind/9.4.2
- version/isc bind/9.3.1
- version/isc bind/4
- version/isc bind/8.2.2-p6
- version/isc bind/4.9.10
- version/isc bind/4.9
- version/isc bind/9.1
- version/isc bind/8.2.6
- version/isc bind/9.2.2-p3
- version/isc bind/9.6.0-rc2
- version/isc bind/8.3.5
- version/isc bind/9.4.3
- version/isc bind/4.9.3
- version/isc bind/4.9.7
- version/isc bind/8.2.2-p5
- version/isc bind/9.6.0
- version/isc bind/8
- version/isc bind/8.3.0
- version/isc bind/9.3.3
- version/isc bind/9.4.0-rc1
- version/isc bind/9.4.0
- version/isc bind/8.2.2-p3
- version/isc bind/9.2.3
- version/isc bind/9.6.0-rc1
- version/isc bind/8.3.3
- version/isc bind/9.2.0
- version/isc bind/9.2.9
- version/isc bind/9.4.3-rc1
- version/isc bind/9.0.1
- version/isc bind/9.5.1-rc1
- version/isc bind/9.0
- version/isc bind/4.9.9
- version/isc bind/8.2-p1
- version/isc bind/8.3.6
- version/isc bind/8.4
- version/isc bind/9.2.6
- version/isc bind/4.9.5
- version/isc bind/9.5.1
- version/isc bind/8.1.1
- version/isc bind/4.9.2
- version/isc bind/8.2.3