NetSight
medium4.3

CVE-2003-0914

ISC BIND 8.3.x before 8.3.7, and 8.4.x before 8.4.3, allows remote attackers to poison the cache via a malicious name server that returns negative responses wi…

Impact

ISC BIND 8.3.x before 8.3.7, and 8.4.x before 8.4.3, allows remote attackers to poison the cache via a malicious name server that returns negative responses with a large TTL (time-to-live) value.

Affected products

VendorProductAffected versions
IscBind
Versions 8.2.3, 8.2.4, 8.2.5, 8.2.6, 8.2.7, 8.3.0
NixuNamesurfer
Versions standard_3.0.1, suite_3.0.1
CompaqTru64
Versions 4.0f, 4.0f_pk6_bl17, 4.0f_pk7_bl18, 4.0f_pk8_bl22, 4.0g, 4.0g_pk3_bl17
FreebsdFreebsd
Versions 4.4, 4.5, 4.6, 4.6.2, 4.7, 4.8
HpHp-Ux
Versions 11.00, 11.11
IbmAix
Version 5.1l
NetbsdNetbsd
Versions 1.6, 1.6.1, current
ScoUnixware
Version 7.1.1
SunSolaris
Versions 7.0, 8.0, 9.0
SunSunos
Versions 5.7, 5.8

References