DNS: BIND iquery Buffer Overflow

This signature detects attempts to exploit a known vulnerability in Internet Software Consortium (ISC) BIND, a nameserver daemon. A successful attack could allow the attacker to execute arbitrary code on the targeted system. Failed exploit attempts could result in a denial of service condition.

Extended Description

A buffer overflow exists in certain versions of BIND, the nameserver daemon currently maintained by the Internet Software Consortium (ISC). BIND fails to properly bound the data recieved when processing an inverse query. Upon a memory copy, portions of the program can be overwritten, and arbitrary commands run on the affected host. Exploits for this vulnerability are very widespread, and were posted to the Bugtraq mailing list.

Affected Products

Netbsd netbsd

References

BugTraq: 134

CVE: CVE-1999-0009

URL: http://www.securityfocus.com/advisories/252 http://www.cert.org/advisories/CA-98.05.bind_problems.html#TOPIC1

Short Name

DNS:QUERY:BIND-IQUERY-BO

Severity

Major

Recommended

False

Recommended Action

Drop

DNS: BIND iquery Buffer Overflow

Extended Description

Affected Products

References

Found a potential security threat?