DNS: Red Hat Enterprise Linux DNS Resolver Buffer Overflow

This signature detects attempts to exploit a known vulnerability against DNS stub resolver library in ISC BIND. A successful attack can lead to arbitrary code execution.

Extended Description

ISC BIND (Berkeley Internet Name Domain) is vulnerable to a buffer overflow condition. The vulnerability exists in the DNS stub resolver library in ISC BIND. The BIND 4 resolver library contains buffer overflows in functions that are responsible for network name and address requests. The consequences of this vulnerability will be highly dependant on the details of individual applications using libc. It is likely that exploitation will allow a malicious DNS server to execute arbitrary code with privileges of the vulnerable process. Under some conditions, this may grant an attacker local access, possibly as a privileged user.

Affected Products

Avaya s8500,Isc bind

References

BugTraq: 6186

CVE: CVE-2002-0029

Short Name

DNS:RESOLVER-BO

Severity

Major

Recommended

False

Recommended Action

Drop

DNS: Red Hat Enterprise Linux DNS Resolver Buffer Overflow

Extended Description

Affected Products

References

Found a potential security threat?