Red Hat Security AdvisoryRHSA-2008:0300
bind security, bug fix, and enhancement update
Released 2008-05-20 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) bind-30:9.3.4-6.P1.el5, bind-30:9.3.4-6.P1.el5.i386, bind-30:9.3.4-6.P1.el5.ia64 +29
- Red Hat Enterprise Linux Desktop (v. 5 client) bind-30:9.3.4-6.P1.el5, bind-30:9.3.4-6.P1.el5.i386, bind-libs-30:9.3.4-6.P1.el5 +5
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) bind-30:9.3.4-6.P1.el5, bind-chroot-30:9.3.4-6.P1.el5, bind-chroot-30:9.3.4-6.P1.el5.i386 +6
Fixes 2 records
Priority MEDIUM 57
Off-by-one error in the inet_network function in libbind in ISC BIND 9.4.2 and earlier, as used in libc in FreeBSD 6.2 through 7.0-PRERELEASE, allows context-dependent attackers to cause a denial of service (crash) and p…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.12399 · Published 2008-01-16 · Partial fix CWE-189
Priority LOW 23
Red Hat Enterprise Linux 5 and Fedora install the Bind /etc/rndc.key file with world-readable permissions, which allows local users to perform unauthorized named commands, such as causing a denial of service by stopping…
CVSS 2.0MEDIUM 4.9· Local · No auth · Interaction — · EPSS 0.00405 · Published 2007-12-18 · Fixed CWE-200
