NetSight
medium5.0

CVE-2002-1221

BIND 8.x through 8.3.3 allows remote attackers to cause a denial of service (crash) via SIG RR elements with invalid expiry times, which are removed from the i…

Impact

BIND 8.x through 8.3.3 allows remote attackers to cause a denial of service (crash) via SIG RR elements with invalid expiry times, which are removed from the internal BIND database and later cause a null dereference.

Affected products

VendorProductAffected versions
IscBind
Versions 8.1, 8.1.1, 8.1.2, 8.2, 8.2.1, 8.2.2
FreebsdFreebsd
Versions 4.4, 4.5, 4.6, 4.7
OpenbsdOpenbsd
Versions 3.0, 3.1, 3.2

References