Read the docs
TI-2003-00834 Aliases CVE-2003-0914GHSA-gqcx-7w82-wcv3

ISC BIND 8.3.x before 8.3.7, and 8.4.x before 8.4.3, allows remote attackers to poison…

Priority LOW 27Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
—
Confidentiality · integrity · availability
None · Partial · None
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

ISC BIND 8.3.x before 8.3.7, and 8.4.x before 8.4.3, allows remote attackers to poison the cache via a malicious name server that returns negative responses with a large TTL (time-to-live) value.

Why it matters now

EPSS 0.03781 90th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 58

CPEVersionsRoleVendor
cpe:2.3:a:isc:bind:8.2.3:*:*:*:*:*:*:*8.2.3VulnerableISC
cpe:2.3:a:isc:bind:8.2.4:*:*:*:*:*:*:*8.2.4VulnerableISC
cpe:2.3:a:isc:bind:8.2.5:*:*:*:*:*:*:*8.2.5VulnerableISC
cpe:2.3:a:isc:bind:8.2.6:*:*:*:*:*:*:*8.2.6VulnerableISC
cpe:2.3:a:isc:bind:8.2.7:*:*:*:*:*:*:*8.2.7VulnerableISC
cpe:2.3:a:isc:bind:8.3.0:*:*:*:*:*:*:*8.3.0VulnerableISC
cpe:2.3:a:isc:bind:8.3.1:*:*:*:*:*:*:*8.3.1VulnerableISC
cpe:2.3:a:isc:bind:8.3.2:*:*:*:*:*:*:*8.3.2VulnerableISC
cpe:2.3:a:isc:bind:8.3.3:*:*:*:*:*:*:*8.3.3VulnerableISC
cpe:2.3:a:isc:bind:8.3.4:*:*:*:*:*:*:*8.3.4VulnerableISC
  • cpe:2.3:a:isc:bind:8.2.3:*:*:*:*:*:*:* Versions 8.2.3 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:8.2.4:*:*:*:*:*:*:* Versions 8.2.4 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:8.2.5:*:*:*:*:*:*:* Versions 8.2.5 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:8.2.6:*:*:*:*:*:*:* Versions 8.2.6 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:8.2.7:*:*:*:*:*:*:* Versions 8.2.7 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:8.3.0:*:*:*:*:*:*:* Versions 8.3.0 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:8.3.1:*:*:*:*:*:*:* Versions 8.3.1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:8.3.2:*:*:*:*:*:*:* Versions 8.3.2 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:8.3.3:*:*:*:*:*:*:* Versions 8.3.3 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:8.3.4:*:*:*:*:*:*:* Versions 8.3.4 Vulnerable ·ISC
Show 48 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:isc:bind:8.3.5:*:*:*:*:*:*:*8.3.5VulnerableISC
cpe:2.3:a:isc:bind:8.3.6:*:*:*:*:*:*:*8.3.6VulnerableISC
cpe:2.3:a:isc:bind:8.4:*:*:*:*:*:*:*8.4VulnerableISC
cpe:2.3:a:isc:bind:8.4.1:*:*:*:*:*:*:*8.4.1VulnerableISC
cpe:2.3:a:nixu:namesurfer:standard_3.0.1:*:*:*:*:*:*:*standard_3.0.1VulnerableNixu
cpe:2.3:a:nixu:namesurfer:suite_3.0.1:*:*:*:*:*:*:*suite_3.0.1VulnerableNixu
cpe:2.3:o:compaq:tru64:4.0f:*:*:*:*:*:*:*4.0fVulnerableCompaq
cpe:2.3:o:compaq:tru64:4.0f_pk6_bl17:*:*:*:*:*:*:*4.0f_pk6_bl17VulnerableCompaq
cpe:2.3:o:compaq:tru64:4.0f_pk7_bl18:*:*:*:*:*:*:*4.0f_pk7_bl18VulnerableCompaq
cpe:2.3:o:compaq:tru64:4.0f_pk8_bl22:*:*:*:*:*:*:*4.0f_pk8_bl22VulnerableCompaq
cpe:2.3:o:compaq:tru64:4.0g:*:*:*:*:*:*:*4.0gVulnerableCompaq
cpe:2.3:o:compaq:tru64:4.0g_pk3_bl17:*:*:*:*:*:*:*4.0g_pk3_bl17VulnerableCompaq
cpe:2.3:o:compaq:tru64:4.0g_pk4_bl22:*:*:*:*:*:*:*4.0g_pk4_bl22VulnerableCompaq
cpe:2.3:o:compaq:tru64:5.1:*:*:*:*:*:*:*5.1VulnerableCompaq
cpe:2.3:o:compaq:tru64:5.1_pk3_bl17:*:*:*:*:*:*:*5.1_pk3_bl17VulnerableCompaq
cpe:2.3:o:compaq:tru64:5.1_pk4_bl18:*:*:*:*:*:*:*5.1_pk4_bl18VulnerableCompaq
cpe:2.3:o:compaq:tru64:5.1_pk5_bl19:*:*:*:*:*:*:*5.1_pk5_bl19VulnerableCompaq
cpe:2.3:o:compaq:tru64:5.1_pk6_bl20:*:*:*:*:*:*:*5.1_pk6_bl20VulnerableCompaq
cpe:2.3:o:compaq:tru64:5.1a:*:*:*:*:*:*:*5.1aVulnerableCompaq
cpe:2.3:o:compaq:tru64:5.1a_pk1_bl1:*:*:*:*:*:*:*5.1a_pk1_bl1VulnerableCompaq
cpe:2.3:o:compaq:tru64:5.1a_pk2_bl2:*:*:*:*:*:*:*5.1a_pk2_bl2VulnerableCompaq
cpe:2.3:o:compaq:tru64:5.1a_pk3_bl3:*:*:*:*:*:*:*5.1a_pk3_bl3VulnerableCompaq
cpe:2.3:o:compaq:tru64:5.1a_pk4_bl21:*:*:*:*:*:*:*5.1a_pk4_bl21VulnerableCompaq
cpe:2.3:o:compaq:tru64:5.1a_pk5_bl23:*:*:*:*:*:*:*5.1a_pk5_bl23VulnerableCompaq
cpe:2.3:o:compaq:tru64:5.1b:*:*:*:*:*:*:*5.1bVulnerableCompaq
cpe:2.3:o:compaq:tru64:5.1b_pk1_bl1:*:*:*:*:*:*:*5.1b_pk1_bl1VulnerableCompaq
cpe:2.3:o:compaq:tru64:5.1b_pk2_bl22:*:*:*:*:*:*:*5.1b_pk2_bl22VulnerableCompaq
cpe:2.3:o:freebsd:freebsd:4.4:*:*:*:*:*:*:*4.4VulnerableFreeBSD
cpe:2.3:o:freebsd:freebsd:4.5:*:*:*:*:*:*:*4.5VulnerableFreeBSD
cpe:2.3:o:freebsd:freebsd:4.6:*:*:*:*:*:*:*4.6VulnerableFreeBSD
cpe:2.3:o:freebsd:freebsd:4.6.2:*:*:*:*:*:*:*4.6.2VulnerableFreeBSD
cpe:2.3:o:freebsd:freebsd:4.7:*:*:*:*:*:*:*4.7VulnerableFreeBSD
cpe:2.3:o:freebsd:freebsd:4.8:*:*:*:*:*:*:*4.8VulnerableFreeBSD
cpe:2.3:o:freebsd:freebsd:4.9:*:*:*:*:*:*:*4.9VulnerableFreeBSD
cpe:2.3:o:freebsd:freebsd:5.0:*:*:*:*:*:*:*5.0VulnerableFreeBSD
cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*11.00VulnerableHewlett Packard Enterprise
cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*11.11VulnerableHewlett Packard Enterprise
cpe:2.3:o:ibm:aix:5.1l:*:*:*:*:*:*:*5.1lVulnerableIBM
cpe:2.3:o:netbsd:netbsd:1.6:*:*:*:*:*:*:*1.6VulnerableNetBSD
cpe:2.3:o:netbsd:netbsd:1.6.1:*:*:*:*:*:*:*1.6.1VulnerableNetBSD
cpe:2.3:o:netbsd:netbsd:current:*:*:*:*:*:*:*currentVulnerableNetBSD
cpe:2.3:o:sco:unixware:7.1.1:*:*:*:*:*:*:*7.1.1VulnerableSco
cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*7.0VulnerableSun
cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*8.0VulnerableSun
cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*9.0VulnerableSun
cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:*9.0VulnerableSun
cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*5.7VulnerableSun
cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*5.8VulnerableSun
  • cpe:2.3:a:isc:bind:8.3.5:*:*:*:*:*:*:* Versions 8.3.5 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:8.3.6:*:*:*:*:*:*:* Versions 8.3.6 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:8.4:*:*:*:*:*:*:* Versions 8.4 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:8.4.1:*:*:*:*:*:*:* Versions 8.4.1 Vulnerable ·ISC
  • cpe:2.3:a:nixu:namesurfer:standard_3.0.1:*:*:*:*:*:*:* Versions standard_3.0.1 Vulnerable ·Nixu
  • cpe:2.3:a:nixu:namesurfer:suite_3.0.1:*:*:*:*:*:*:* Versions suite_3.0.1 Vulnerable ·Nixu
  • cpe:2.3:o:compaq:tru64:4.0f:*:*:*:*:*:*:* Versions 4.0f Vulnerable ·Compaq
  • cpe:2.3:o:compaq:tru64:4.0f_pk6_bl17:*:*:*:*:*:*:* Versions 4.0f_pk6_bl17 Vulnerable ·Compaq
  • cpe:2.3:o:compaq:tru64:4.0f_pk7_bl18:*:*:*:*:*:*:* Versions 4.0f_pk7_bl18 Vulnerable ·Compaq
  • cpe:2.3:o:compaq:tru64:4.0f_pk8_bl22:*:*:*:*:*:*:* Versions 4.0f_pk8_bl22 Vulnerable ·Compaq
  • cpe:2.3:o:compaq:tru64:4.0g:*:*:*:*:*:*:* Versions 4.0g Vulnerable ·Compaq
  • cpe:2.3:o:compaq:tru64:4.0g_pk3_bl17:*:*:*:*:*:*:* Versions 4.0g_pk3_bl17 Vulnerable ·Compaq
  • cpe:2.3:o:compaq:tru64:4.0g_pk4_bl22:*:*:*:*:*:*:* Versions 4.0g_pk4_bl22 Vulnerable ·Compaq
  • cpe:2.3:o:compaq:tru64:5.1:*:*:*:*:*:*:* Versions 5.1 Vulnerable ·Compaq
  • cpe:2.3:o:compaq:tru64:5.1_pk3_bl17:*:*:*:*:*:*:* Versions 5.1_pk3_bl17 Vulnerable ·Compaq
  • cpe:2.3:o:compaq:tru64:5.1_pk4_bl18:*:*:*:*:*:*:* Versions 5.1_pk4_bl18 Vulnerable ·Compaq
  • cpe:2.3:o:compaq:tru64:5.1_pk5_bl19:*:*:*:*:*:*:* Versions 5.1_pk5_bl19 Vulnerable ·Compaq
  • cpe:2.3:o:compaq:tru64:5.1_pk6_bl20:*:*:*:*:*:*:* Versions 5.1_pk6_bl20 Vulnerable ·Compaq
  • cpe:2.3:o:compaq:tru64:5.1a:*:*:*:*:*:*:* Versions 5.1a Vulnerable ·Compaq
  • cpe:2.3:o:compaq:tru64:5.1a_pk1_bl1:*:*:*:*:*:*:* Versions 5.1a_pk1_bl1 Vulnerable ·Compaq
  • cpe:2.3:o:compaq:tru64:5.1a_pk2_bl2:*:*:*:*:*:*:* Versions 5.1a_pk2_bl2 Vulnerable ·Compaq
  • cpe:2.3:o:compaq:tru64:5.1a_pk3_bl3:*:*:*:*:*:*:* Versions 5.1a_pk3_bl3 Vulnerable ·Compaq
  • cpe:2.3:o:compaq:tru64:5.1a_pk4_bl21:*:*:*:*:*:*:* Versions 5.1a_pk4_bl21 Vulnerable ·Compaq
  • cpe:2.3:o:compaq:tru64:5.1a_pk5_bl23:*:*:*:*:*:*:* Versions 5.1a_pk5_bl23 Vulnerable ·Compaq
  • cpe:2.3:o:compaq:tru64:5.1b:*:*:*:*:*:*:* Versions 5.1b Vulnerable ·Compaq
  • cpe:2.3:o:compaq:tru64:5.1b_pk1_bl1:*:*:*:*:*:*:* Versions 5.1b_pk1_bl1 Vulnerable ·Compaq
  • cpe:2.3:o:compaq:tru64:5.1b_pk2_bl22:*:*:*:*:*:*:* Versions 5.1b_pk2_bl22 Vulnerable ·Compaq
  • cpe:2.3:o:freebsd:freebsd:4.4:*:*:*:*:*:*:* Versions 4.4 Vulnerable ·FreeBSD
  • cpe:2.3:o:freebsd:freebsd:4.5:*:*:*:*:*:*:* Versions 4.5 Vulnerable ·FreeBSD
  • cpe:2.3:o:freebsd:freebsd:4.6:*:*:*:*:*:*:* Versions 4.6 Vulnerable ·FreeBSD
  • cpe:2.3:o:freebsd:freebsd:4.6.2:*:*:*:*:*:*:* Versions 4.6.2 Vulnerable ·FreeBSD
  • cpe:2.3:o:freebsd:freebsd:4.7:*:*:*:*:*:*:* Versions 4.7 Vulnerable ·FreeBSD
  • cpe:2.3:o:freebsd:freebsd:4.8:*:*:*:*:*:*:* Versions 4.8 Vulnerable ·FreeBSD
  • cpe:2.3:o:freebsd:freebsd:4.9:*:*:*:*:*:*:* Versions 4.9 Vulnerable ·FreeBSD
  • cpe:2.3:o:freebsd:freebsd:5.0:*:*:*:*:*:*:* Versions 5.0 Vulnerable ·FreeBSD
  • cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:* Versions 11.00 Vulnerable ·Hewlett Packard Enterprise
  • cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:* Versions 11.11 Vulnerable ·Hewlett Packard Enterprise
  • cpe:2.3:o:ibm:aix:5.1l:*:*:*:*:*:*:* Versions 5.1l Vulnerable ·IBM
  • cpe:2.3:o:netbsd:netbsd:1.6:*:*:*:*:*:*:* Versions 1.6 Vulnerable ·NetBSD
  • cpe:2.3:o:netbsd:netbsd:1.6.1:*:*:*:*:*:*:* Versions 1.6.1 Vulnerable ·NetBSD
  • cpe:2.3:o:netbsd:netbsd:current:*:*:*:*:*:*:* Versions current Vulnerable ·NetBSD
  • cpe:2.3:o:sco:unixware:7.1.1:*:*:*:*:*:*:* Versions 7.1.1 Vulnerable ·Sco
  • cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:* Versions 7.0 Vulnerable ·Sun
  • cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:* Versions 8.0 Vulnerable ·Sun
  • cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:* Versions 9.0 Vulnerable ·Sun
  • cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:* Versions 9.0 Vulnerable ·Sun
  • cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:* Versions 5.7 Vulnerable ·Sun
  • cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:* Versions 5.8 Vulnerable ·Sun

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2003-0914
  2. 2026-10-03 Alias added: GHSA-gqcx-7w82-wcv3
  3. 2026-11-06 EPSS moved to the 90th–95th percentile

References

Patch 2

Advisory 2

Other 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences