NVD脆弱性詳細

CVE-2007-0494

概要	ISC BIND 9.0.x, 9.1.x, 9.2.0 up to 9.2.7, 9.3.0 up to 9.3.3, 9.4.0a1 up to 9.4.0a6, 9.4.0b1 up to 9.4.0b4, 9.4.0rc1, and 9.5.0a1 (Bind Forum only) allows remote attackers to cause a denial of service (exit) via a type * (ANY) DNS query response that contains multiple RRsets, which triggers an assertion error, aka the "DNSSEC Validation" vulnerability.
概要	Syccessful exploitation requires that the victim has enabled dnssec validation in named.conf by specifying trusted-keys.
公表日	2007年1月26日5:28
登録日	2021年1月29日14:05
最終更新日	2017年10月11日10:31

CVSS2.0 : MEDIUM
スコア	4.3
ベクター	AV:N/AC:M/Au:N/C:N/I:N/A:P
攻撃元区分(AV)	ネットワーク
攻撃条件の複雑さ(AC)	中
攻撃前の認証要否(Au)	不要
機密性への影響(C)	なし
完全性への影響(I)	なし
可用性への影響(A)	低
全ての特権を取得	いいえ
ユーザー権限を取得	いいえ
その他の権限を取得	いいえ
ユーザー操作が必要	いいえ

影響を受けるソフトウェアの構成

構成1	以上	以下	より上	未満
cpe:2.3:a:isc:bind:9.0:::::::*
cpe:2.3:a:isc:bind:9.0.0:rc1::::::
cpe:2.3:a:isc:bind:9.0.0:rc2::::::
cpe:2.3:a:isc:bind:9.0.0:rc3::::::
cpe:2.3:a:isc:bind:9.0.0:rc4::::::
cpe:2.3:a:isc:bind:9.0.0:rc5::::::
cpe:2.3:a:isc:bind:9.0.0:rc6::::::
cpe:2.3:a:isc:bind:9.0.1:::::::*
cpe:2.3:a:isc:bind:9.0.1:rc1::::::
cpe:2.3:a:isc:bind:9.0.1:rc2::::::
cpe:2.3:a:isc:bind:9.1:::::::*
cpe:2.3:a:isc:bind:9.1.0:rc1::::::
cpe:2.3:a:isc:bind:9.1.1:::::::*
cpe:2.3:a:isc:bind:9.1.1:rc1::::::
cpe:2.3:a:isc:bind:9.1.1:rc2::::::
cpe:2.3:a:isc:bind:9.1.1:rc3::::::
cpe:2.3:a:isc:bind:9.1.1:rc4::::::
cpe:2.3:a:isc:bind:9.1.1:rc5::::::
cpe:2.3:a:isc:bind:9.1.1:rc6::::::
cpe:2.3:a:isc:bind:9.1.1:rc7::::::
cpe:2.3:a:isc:bind:9.1.2:::::::*
cpe:2.3:a:isc:bind:9.1.2:rc1::::::
cpe:2.3:a:isc:bind:9.1.3:::::::*
cpe:2.3:a:isc:bind:9.1.3:rc1::::::
cpe:2.3:a:isc:bind:9.1.3:rc2::::::
cpe:2.3:a:isc:bind:9.1.3:rc3::::::
cpe:2.3:a:isc:bind:9.2:::::::*
cpe:2.3:a:isc:bind:9.2.0:::::::*
cpe:2.3:a:isc:bind:9.2.0:a1::::::
cpe:2.3:a:isc:bind:9.2.0:a2::::::
cpe:2.3:a:isc:bind:9.2.0:a3::::::
cpe:2.3:a:isc:bind:9.2.0:b1::::::
cpe:2.3:a:isc:bind:9.2.0:b2::::::
cpe:2.3:a:isc:bind:9.2.0:rc1::::::
cpe:2.3:a:isc:bind:9.2.0:rc10::::::
cpe:2.3:a:isc:bind:9.2.0:rc2::::::
cpe:2.3:a:isc:bind:9.2.0:rc3::::::
cpe:2.3:a:isc:bind:9.2.0:rc4::::::
cpe:2.3:a:isc:bind:9.2.0:rc5::::::
cpe:2.3:a:isc:bind:9.2.0:rc6::::::
cpe:2.3:a:isc:bind:9.2.0:rc7::::::
cpe:2.3:a:isc:bind:9.2.0:rc8::::::
cpe:2.3:a:isc:bind:9.2.0:rc9::::::
cpe:2.3:a:isc:bind:9.2.1:::::::*
cpe:2.3:a:isc:bind:9.2.1:rc1::::::
cpe:2.3:a:isc:bind:9.2.1:rc2::::::
cpe:2.3:a:isc:bind:9.2.2:::::::*
cpe:2.3:a:isc:bind:9.2.2:p2::::::
cpe:2.3:a:isc:bind:9.2.2:p3::::::
cpe:2.3:a:isc:bind:9.2.2:rc1::::::
cpe:2.3:a:isc:bind:9.2.3:::::::*
cpe:2.3:a:isc:bind:9.2.3:rc1::::::
cpe:2.3:a:isc:bind:9.2.3:rc2::::::
cpe:2.3:a:isc:bind:9.2.3:rc3::::::
cpe:2.3:a:isc:bind:9.2.3:rc4::::::
cpe:2.3:a:isc:bind:9.2.4:::::::*
cpe:2.3:a:isc:bind:9.2.4:rc2::::::
cpe:2.3:a:isc:bind:9.2.4:rc3::::::
cpe:2.3:a:isc:bind:9.2.4:rc4::::::
cpe:2.3:a:isc:bind:9.2.4:rc5::::::
cpe:2.3:a:isc:bind:9.2.4:rc6::::::
cpe:2.3:a:isc:bind:9.2.4:rc7::::::
cpe:2.3:a:isc:bind:9.2.4:rc8::::::
cpe:2.3:a:isc:bind:9.2.5:::::::*
cpe:2.3:a:isc:bind:9.2.5:b2::::::
cpe:2.3:a:isc:bind:9.2.5:rc1::::::
cpe:2.3:a:isc:bind:9.2.6:::::::*
cpe:2.3:a:isc:bind:9.2.6:rc1::::::
cpe:2.3:a:isc:bind:9.3:::::::*
cpe:2.3:a:isc:bind:9.3.0:::::::*
cpe:2.3:a:isc:bind:9.3.0:b2::::::
cpe:2.3:a:isc:bind:9.3.0:b3::::::
cpe:2.3:a:isc:bind:9.3.0:b4::::::
cpe:2.3:a:isc:bind:9.3.0:rc1::::::
cpe:2.3:a:isc:bind:9.3.0:rc2::::::
cpe:2.3:a:isc:bind:9.3.0:rc3::::::
cpe:2.3:a:isc:bind:9.3.0:rc4::::::
cpe:2.3:a:isc:bind:9.3.1:::::::*
cpe:2.3:a:isc:bind:9.3.1:b2::::::
cpe:2.3:a:isc:bind:9.3.1:rc1::::::
cpe:2.3:a:isc:bind:9.3.2:::::::*
cpe:2.3:a:isc:bind:9.3.2:rc1::::::
cpe:2.3:a:isc:bind:9.4.0:a1::::::
cpe:2.3:a:isc:bind:9.4.0:a2::::::
cpe:2.3:a:isc:bind:9.4.0:a3::::::
cpe:2.3:a:isc:bind:9.4.0:a4::::::
cpe:2.3:a:isc:bind:9.4.0:a5::::::
cpe:2.3:a:isc:bind:9.4.0:b1::::::
cpe:2.3:a:isc:bind:9.4.0:b2::::::
cpe:2.3:a:isc:bind:9.4.0:b3::::::
cpe:2.3:a:isc:bind:9.4.0:rc1::::::
cpe:2.3:a:isc:bind:9.5.0:a1::::::

関連情報、対策とツール

No	URL	refsource	タグ
1	ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc	SGI
2	http://docs.info.apple.com/article.html?artnum=305530	CONFIRM
3	http://fedoranews.org/cms/node/2507	FEDORA
4	http://fedoranews.org/cms/node/2537	FEDORA
5	http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2007-003.txt.asc	NETBSD
6	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01070495	HP
7	http://lists.apple.com/archives/security-announce/2007/May/msg00004.html	APPLE
8	http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html	FULLDISC
9	http://lists.suse.com/archive/suse-security-announce/2007-Jan/0016.html	SUSE
10	http://marc.info/?l=bind-announce&m=116968519300764&w=2	MLIST
11	http://secunia.com/advisories/23904	SECUNIA	Patch Vendor Advisory
12	http://secunia.com/advisories/23924	SECUNIA	Vendor Advisory
13	http://secunia.com/advisories/23943	SECUNIA	Vendor Advisory
14	http://secunia.com/advisories/23944	SECUNIA	Vendor Advisory
15	http://secunia.com/advisories/23972	SECUNIA	Vendor Advisory
16	http://secunia.com/advisories/23974	SECUNIA	Vendor Advisory
17	http://secunia.com/advisories/23977	SECUNIA	Vendor Advisory
18	http://secunia.com/advisories/24014	SECUNIA	Vendor Advisory
19	http://secunia.com/advisories/24048	SECUNIA	Vendor Advisory
20	http://secunia.com/advisories/24054	SECUNIA	Vendor Advisory
21	http://secunia.com/advisories/24083	SECUNIA	Vendor Advisory
22	http://secunia.com/advisories/24129	SECUNIA	Vendor Advisory
23	http://secunia.com/advisories/24203	SECUNIA	Vendor Advisory
24	http://secunia.com/advisories/24284	SECUNIA
25	http://secunia.com/advisories/24648	SECUNIA	Vendor Advisory
26	http://secunia.com/advisories/24930	SECUNIA	Vendor Advisory
27	http://secunia.com/advisories/24950	SECUNIA	Vendor Advisory
28	http://secunia.com/advisories/25402	SECUNIA	Vendor Advisory
29	http://secunia.com/advisories/25482	SECUNIA
30	http://secunia.com/advisories/25649	SECUNIA
31	http://secunia.com/advisories/25715	SECUNIA
32	http://secunia.com/advisories/26909	SECUNIA
33	http://secunia.com/advisories/27706	SECUNIA
34	http://security.freebsd.org/advisories/FreeBSD-SA-07:02.bind.asc	FREEBSD
35	http://security.gentoo.org/glsa/glsa-200702-06.xml	GENTOO
36	http://securitytracker.com/id?1017573	SECTRACK
37	http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.494157	SLACKWARE
38	http://sunsolve.sun.com/search/document.do?assetkey=1-26-102969-1	SUNALERT
39	http://support.avaya.com/elmodocs2/security/ASA-2007-125.htm	CONFIRM
40	http://www.debian.org/security/2007/dsa-1254	DEBIAN
41	http://www.isc.org/index.pl?/sw/bind/bind-security.php	CONFIRM
42	http://www.isc.org/index.pl?/sw/bind/view/?release=9.2.8	CONFIRM	Patch
43	http://www.isc.org/index.pl?/sw/bind/view/?release=9.3.4	CONFIRM	Patch
44	http://www.mandriva.com/security/advisories?name=MDKSA-2007:030	MANDRIVA
45	http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.007.html	OPENPKG
46	http://www.redhat.com/support/errata/RHSA-2007-0044.html	REDHAT
47	http://www.redhat.com/support/errata/RHSA-2007-0057.html	REDHAT
48	http://www.securityfocus.com/bid/22231	BID
49	http://www.trustix.org/errata/2007/0005	TRUSTIX
50	http://www.ubuntu.com/usn/usn-418-1	UBUNTU
51	http://www.vupen.com/english/advisories/2007/1401	VUPEN
52	http://www.vupen.com/english/advisories/2007/1939	VUPEN
53	http://www.vupen.com/english/advisories/2007/2002	VUPEN
54	http://www.vupen.com/english/advisories/2007/2163	VUPEN
55	http://www.vupen.com/english/advisories/2007/2245	VUPEN
56	http://www.vupen.com/english/advisories/2007/2315	VUPEN
57	http://www.vupen.com/english/advisories/2007/3229	VUPEN
58	http://www-1.ibm.com/support/docview.wss?uid=isg1IY95618	AIXAPAR
59	http://www-1.ibm.com/support/docview.wss?uid=isg1IY95619	AIXAPAR
60	http://www-1.ibm.com/support/docview.wss?uid=isg1IY96144	AIXAPAR
61	http://www-1.ibm.com/support/docview.wss?uid=isg1IY96324	AIXAPAR
62	https://exchange.xforce.ibmcloud.com/vulnerabilities/31838	XF
63	https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952488	CONFIRM
64	https://issues.rpath.com/browse/RPL-989	CONFIRM
65	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11523	OVAL
66	https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144	HP

共通脆弱性一覧

構成1	以上	以下	より上	未満
cpe:2.3:a:isc:bind:9.0:::::::*
cpe:2.3:a:isc:bind:9.0.0:rc1::::::
cpe:2.3:a:isc:bind:9.0.0:rc2::::::
cpe:2.3:a:isc:bind:9.0.0:rc3::::::
cpe:2.3:a:isc:bind:9.0.0:rc4::::::
cpe:2.3:a:isc:bind:9.0.0:rc5::::::
cpe:2.3:a:isc:bind:9.0.0:rc6::::::
cpe:2.3:a:isc:bind:9.0.1:::::::*
cpe:2.3:a:isc:bind:9.0.1:rc1::::::
cpe:2.3:a:isc:bind:9.0.1:rc2::::::
cpe:2.3:a:isc:bind:9.1:::::::*
cpe:2.3:a:isc:bind:9.1.0:rc1::::::
cpe:2.3:a:isc:bind:9.1.1:::::::*
cpe:2.3:a:isc:bind:9.1.1:rc1::::::
cpe:2.3:a:isc:bind:9.1.1:rc2::::::
cpe:2.3:a:isc:bind:9.1.1:rc3::::::
cpe:2.3:a:isc:bind:9.1.1:rc4::::::
cpe:2.3:a:isc:bind:9.1.1:rc5::::::
cpe:2.3:a:isc:bind:9.1.1:rc6::::::
cpe:2.3:a:isc:bind:9.1.1:rc7::::::
cpe:2.3:a:isc:bind:9.1.2:::::::*
cpe:2.3:a:isc:bind:9.1.2:rc1::::::
cpe:2.3:a:isc:bind:9.1.3:::::::*
cpe:2.3:a:isc:bind:9.1.3:rc1::::::
cpe:2.3:a:isc:bind:9.1.3:rc2::::::
cpe:2.3:a:isc:bind:9.1.3:rc3::::::
cpe:2.3:a:isc:bind:9.2:::::::*
cpe:2.3:a:isc:bind:9.2.0:::::::*
cpe:2.3:a:isc:bind:9.2.0:a1::::::
cpe:2.3:a:isc:bind:9.2.0:a2::::::
cpe:2.3:a:isc:bind:9.2.0:a3::::::
cpe:2.3:a:isc:bind:9.2.0:b1::::::
cpe:2.3:a:isc:bind:9.2.0:b2::::::
cpe:2.3:a:isc:bind:9.2.0:rc1::::::
cpe:2.3:a:isc:bind:9.2.0:rc10::::::
cpe:2.3:a:isc:bind:9.2.0:rc2::::::
cpe:2.3:a:isc:bind:9.2.0:rc3::::::
cpe:2.3:a:isc:bind:9.2.0:rc4::::::
cpe:2.3:a:isc:bind:9.2.0:rc5::::::
cpe:2.3:a:isc:bind:9.2.0:rc6::::::
cpe:2.3:a:isc:bind:9.2.0:rc7::::::
cpe:2.3:a:isc:bind:9.2.0:rc8::::::
cpe:2.3:a:isc:bind:9.2.0:rc9::::::
cpe:2.3:a:isc:bind:9.2.1:::::::*
cpe:2.3:a:isc:bind:9.2.1:rc1::::::
cpe:2.3:a:isc:bind:9.2.1:rc2::::::
cpe:2.3:a:isc:bind:9.2.2:::::::*
cpe:2.3:a:isc:bind:9.2.2:p2::::::
cpe:2.3:a:isc:bind:9.2.2:p3::::::
cpe:2.3:a:isc:bind:9.2.2:rc1::::::
cpe:2.3:a:isc:bind:9.2.3:::::::*
cpe:2.3:a:isc:bind:9.2.3:rc1::::::
cpe:2.3:a:isc:bind:9.2.3:rc2::::::
cpe:2.3:a:isc:bind:9.2.3:rc3::::::
cpe:2.3:a:isc:bind:9.2.3:rc4::::::
cpe:2.3:a:isc:bind:9.2.4:::::::*
cpe:2.3:a:isc:bind:9.2.4:rc2::::::
cpe:2.3:a:isc:bind:9.2.4:rc3::::::
cpe:2.3:a:isc:bind:9.2.4:rc4::::::
cpe:2.3:a:isc:bind:9.2.4:rc5::::::
cpe:2.3:a:isc:bind:9.2.4:rc6::::::
cpe:2.3:a:isc:bind:9.2.4:rc7::::::
cpe:2.3:a:isc:bind:9.2.4:rc8::::::
cpe:2.3:a:isc:bind:9.2.5:::::::*
cpe:2.3:a:isc:bind:9.2.5:b2::::::
cpe:2.3:a:isc:bind:9.2.5:rc1::::::
cpe:2.3:a:isc:bind:9.2.6:::::::*
cpe:2.3:a:isc:bind:9.2.6:rc1::::::
cpe:2.3:a:isc:bind:9.3:::::::*
cpe:2.3:a:isc:bind:9.3.0:::::::*
cpe:2.3:a:isc:bind:9.3.0:b2::::::
cpe:2.3:a:isc:bind:9.3.0:b3::::::
cpe:2.3:a:isc:bind:9.3.0:b4::::::
cpe:2.3:a:isc:bind:9.3.0:rc1::::::
cpe:2.3:a:isc:bind:9.3.0:rc2::::::
cpe:2.3:a:isc:bind:9.3.0:rc3::::::
cpe:2.3:a:isc:bind:9.3.0:rc4::::::
cpe:2.3:a:isc:bind:9.3.1:::::::*
cpe:2.3:a:isc:bind:9.3.1:b2::::::
cpe:2.3:a:isc:bind:9.3.1:rc1::::::
cpe:2.3:a:isc:bind:9.3.2:::::::*
cpe:2.3:a:isc:bind:9.3.2:rc1::::::
cpe:2.3:a:isc:bind:9.4.0:a1::::::
cpe:2.3:a:isc:bind:9.4.0:a2::::::
cpe:2.3:a:isc:bind:9.4.0:a3::::::
cpe:2.3:a:isc:bind:9.4.0:a4::::::
cpe:2.3:a:isc:bind:9.4.0:a5::::::
cpe:2.3:a:isc:bind:9.4.0:b1::::::
cpe:2.3:a:isc:bind:9.4.0:b2::::::
cpe:2.3:a:isc:bind:9.4.0:b3::::::
cpe:2.3:a:isc:bind:9.4.0:rc1::::::
cpe:2.3:a:isc:bind:9.5.0:a1::::::