NetSight
IP …
medium5.0Public exploit code

CVE-2002-1220

BIND 8.3.x through 8.3.3 allows remote attackers to cause a denial of service (termination due to assertion failure) via a request for a subdomain that does no…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

BIND 8.3.x through 8.3.3 allows remote attackers to cause a denial of service (termination due to assertion failure) via a request for a subdomain that does not exist, with an OPT resource record with a large UDP payload size.

Affected products

VendorProductAffected versions
IscBind
Versions 8.3.0, 8.3.1, 8.3.2, 8.3.3
FreebsdFreebsd
Versions 4.4, 4.5, 4.6, 4.7
OpenbsdOpenbsd
Versions 3.0, 3.1, 3.2

References